VYPR

Credhub Service Broker

by Pivotal Cloud Foundry

CVEs (1)

  • CVE-2018-15795Nov 13, 2018
    risk 0.00cvss epss 0.00

    Pivotal CredHub Service Broker, versions prior to 1.1.0, uses a guessable form of random number generation in creating service broker's UAA client. A remote malicious user may guess the client secret and obtain or modify credentials for users of the CredHub Service.