CVE-2018-1198

EUVD-2018-11833 · Published Sep 17, 2018

Pivotal Cloud Cache, versions prior to 1.3.1, prints a superuser password in plain text during BOSH deployment logs. A malicious user with access to the logs could escalate their privileges using this password.

Technologies

Pivotal_Software Pivotal Cloud Cache

Weaknesses

CWE-532

CVSS scores

v3.08.8CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
v2.04.0AV:N/AC:L/Au:S/C:P/I:N/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

https://pivotal.io/security/cve-2018-1198

Potentially impacted assets

See if this affects your attack surface