← Back

Bosh System Metrics Server

bosh_system_metrics_server

Vendor: Cloud Foundry • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-5422
1Cloud Foundry
1Bosh System Metrics Server
Jun 17, 2026
Oct 2, 2020
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
BOSH System Metrics Server releases prior to 0.1.0 exposed the UAA password as a flag to a process running on the BOSH director. It exposed the password to any user or process with access to the same VM (through ps or lo...Show more
BOSH System Metrics Server releases prior to 0.1.0 exposed the UAA password as a flag to a process running on the BOSH director. It exposed the password to any user or process with access to the same VM (through ps or looking at process details).Show less