9.1crit
CVE-2018-1264
Log Cache logs UAA client secret on startup
Published 8 y ago · modified 4 mo ago · JSON
CVSS
9.1
v3.0 · CNA
CISA KEV
No
not known exploited
EPSS
1.8%
percentile 79%
Public exploits
0
none known
Summary
Cloud Foundry Log Cache, versions prior to 1.1.1, logs its UAA client secret on startup as part of its envstruct report. A remote attacker who has gained access to the Log Cache VM can read this secret, gaining all privileges held by the Log Cache UAA client. In the worst case, if this client is an admin, the attacker would gain complete control over the Foundation.
Exploit prediction (EPSS)
1.81% probability of exploitation in the next 30 days, higher than 79% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CNA | 3.0 | 9.1 | CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H |
| CNA | 3.0 | 9.1 | CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H |
| NVD | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Affected products
- Cloud Foundry log-cache-release
Classification
- Weakness
- CWE-532 Insertion of Sensitive Information into Log File
References
- cloudfoundry.org /blog/cve-2018-1264/ · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2018-1264
- NVD: CVE-2018-1264
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.