CVE-2017-4955
CriticalSummary
An issue was discovered in Pivotal PCF Elastic Runtime in versions 1.6.x prior to 1.6.65, 1.7.x prior to 1.7.48, 1.8.x prior to 1.8.28, and 1.9.x prior to 1.9.5, where several credentials were present in the logs for the Notifications errand.
Risk Assessment
The presence of credentials in logs may lead to unauthorized access to the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update Pivotal PCF Elastic Runtime to the latest version to mitigate the vulnerability and secure the credentials.
Original NVD description (English source)
An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.65, 1.7.x versions prior to 1.7.48, 1.8.x versions prior to 1.8.28, and 1.9.x versions prior to 1.9.5. Several credentials were present in the logs for the Notifications errand in the PCF Elastic Runtime tile.