Skip to content
OpenAdvisories

Product · Cloud Foundry

log-cache-release

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2018-1264

    Log Cache logs UAA client secret on startup

    Cloud Foundry Log Cache, versions prior to 1.1.1, logs its UAA client secret on startup as part of its envstruct report. A remote attacker who has gained access to the Log Cache VM can read this secret, gaining all privileges held by the Log Cache UAA client.…

    Cloud Foundry log-cache-release