CVE-2017-4955
Published: Jun 13, 2017Modified: May 13, 2026
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD
Description
An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.65, 1.7.x versions prior to 1.7.48, 1.8.x versions prior to 1.8.28, and 1.9.x versions prior to 1.9.5. Several credentials were present in the logs for the Notifications errand in the PCF Elastic Runtime tile.
Affected (143)
Products: Pivotal Software: Cloud Foundry Elastic Runtime
Configuration A143 vulnerable
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.6.0 | |
| Version 1.6.10 | |
| Version 1.6.11 | |
| Version 1.6.12 | |
| Version 1.6.13 | |
| Version 1.6.14 | |
| Version 1.6.15 | |
| Version 1.6.16 | |
| Version 1.6.17 | |
| Version 1.6.18 | |
| Version 1.6.19 | |
| Version 1.6.1 | |
| Version 1.6.20 | |
| Version 1.6.21 | |
| Version 1.6.22 | |
| Version 1.6.23 | |
| Version 1.6.24 | |
| Version 1.6.25 | |
| Version 1.6.26 | |
| Version 1.6.27 | |
| Version 1.6.28 | |
| Version 1.6.29 | |
| Version 1.6.2 | |
| Version 1.6.30 | |
| Version 1.6.31 | |
| Version 1.6.32 | |
| Version 1.6.33 | |
| Version 1.6.34 | |
| Version 1.6.35 | |
| Version 1.6.36 | |
| Version 1.6.37 | |
| Version 1.6.38 | |
| Version 1.6.39 | |
| Version 1.6.3 | |
| Version 1.6.40 | |
| Version 1.6.41 | |
| Version 1.6.42 | |
| Version 1.6.43 | |
| Version 1.6.44 | |
| Version 1.6.45 | |
| Version 1.6.46 | |
| Version 1.6.47 | |
| Version 1.6.48 | |
| Version 1.6.49 | |
| Version 1.6.4 | |
| Version 1.6.50 | |
| Version 1.6.51 | |
| Version 1.6.52 | |
| Version 1.6.53 | |
| Version 1.6.54 | |
| Version 1.6.55 | |
| Version 1.6.56 | |
| Version 1.6.57 | |
| Version 1.6.58 | |
| Version 1.6.59 | |
| Version 1.6.5 | |
| Version 1.6.60 | |
| Version 1.6.61 | |
| Version 1.6.62 | |
| Version 1.6.63 | |
| Version 1.6.64 | |
| Version 1.6.6 | |
| Version 1.6.7 | |
| Version 1.6.8 | |
| Version 1.6.9 | |
| Version 1.7.10 | |
| Version 1.7.11 | |
| Version 1.7.12 | |
| Version 1.7.13 | |
| Version 1.7.14 | |
| Version 1.7.15 | |
| Version 1.7.16 | |
| Version 1.7.17 | |
| Version 1.7.18 | |
| Version 1.7.19 | |
| Version 1.7.1 | |
| Version 1.7.20 | |
| Version 1.7.21 | |
| Version 1.7.22 | |
| Version 1.7.23 | |
| Version 1.7.24 | |
| Version 1.7.25 | |
| Version 1.7.26 | |
| Version 1.7.27 | |
| Version 1.7.28 | |
| Version 1.7.29 | |
| Version 1.7.2 | |
| Version 1.7.30 | |
| Version 1.7.31 | |
| Version 1.7.32 | |
| Version 1.7.33 | |
| Version 1.7.34 | |
| Version 1.7.35 | |
| Version 1.7.36 | |
| Version 1.7.37 | |
| Version 1.7.38 | |
| Version 1.7.39 | |
| Version 1.7.3 | |
| Version 1.7.40 | |
| Version 1.7.41 | |
| Version 1.7.42 | |
| Version 1.7.43 | |
| Version 1.7.44 | |
| Version 1.7.45 | |
| Version 1.7.46 | |
| Version 1.7.47 | |
| Version 1.7.4 | |
| Version 1.7.5 | |
| Version 1.7.6 | |
| Version 1.7.7 | |
| Version 1.7.8 | |
| Version 1.7.9 | |
| Version 1.8.10 | |
| Version 1.8.11 | |
| Version 1.8.12 | |
| Version 1.8.13 | |
| Version 1.8.14 | |
| Version 1.8.15 | |
| Version 1.8.16 | |
| Version 1.8.17 | |
| Version 1.8.18 | |
| Version 1.8.19 | |
| Version 1.8.1 | |
| Version 1.8.20 | |
| Version 1.8.21 | |
| Version 1.8.22 | |
| Version 1.8.23 | |
| Version 1.8.24 | |
| Version 1.8.25 | |
| Version 1.8.26 | |
| Version 1.8.27 | |
| Version 1.8.2 | |
| Version 1.8.3 | |
| Version 1.8.4 | |
| Version 1.8.5 | |
| Version 1.8.6 | |
| Version 1.8.7 | |
| Version 1.8.8 | |
| Version 1.8.9 | |
| Version 1.9.1 | |
| Version 1.9.2 | |
| Version 1.9.3 | |
| Version 1.9.4 |
References (4)
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationVendor Advisory
Timeline
No history available yet.