Security Advisory

CVE-2020-5406

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-04-10 18:50:12

Last updated 2024-09-17 03:17:26

Assigner pivotal

CVSS score not scored

State PUBLISHED

Description

VMware Tanzu Application Service for VMs, 2.6.x versions prior to 2.6.18, 2.7.x versions prior to 2.7.11, and 2.8.x versions prior to 2.8.5, includes a version of PCF Autoscaling that writes database connection properties to its log, including database username and password. A malicious user with access to those logs may gain unauthorized access to the database being used by Autoscaling.

← Browse all CVEs View on cve.org ↗