← Back

Tanzu Application Service For Vms

tanzu_application_service_for_vms

Vendor: Vmware • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-5406
1Vmware
1Tanzu Application Service For Vms
Jun 17, 2026
Apr 10, 2020
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
VMware Tanzu Application Service for VMs, 2.6.x versions prior to 2.6.18, 2.7.x versions prior to 2.7.11, and 2.8.x versions prior to 2.8.5, includes a version of PCF Autoscaling that writes database connection propertie...Show more
VMware Tanzu Application Service for VMs, 2.6.x versions prior to 2.6.18, 2.7.x versions prior to 2.7.11, and 2.8.x versions prior to 2.8.5, includes a version of PCF Autoscaling that writes database connection properties to its log, including database username and password. A malicious user with access to those logs may gain unauthorized access to the database being used by Autoscaling.Show less