VYPR

Pivotal Container Service

by Cloudfoundry

CVEs (2)

  • CVE-2018-15763CriOct 5, 2018
    risk 0.59cvss 9.0epss 0.01

    Pivotal Container Service, versions prior to 1.2.0, contains an information disclosure vulnerability which exposes IaaS credentials to application logs. A malicious user with access to application logs may be able to obtain IaaS credentials and perform actions using these…

  • CVE-2019-11273MedJul 23, 2019
    risk 0.28cvss 4.3epss 0.01

    Pivotal Container Services (PKS) versions 1.3.x prior to 1.3.7, and versions 1.4.x prior to 1.4.1, contains a vulnerable component which logs the username and password to the billing database. A remote authenticated user with access to those logs may be able to retrieve…