2018-11-13 14:00:00
dell
PUBLISHED
Pivotal CredHub Service Broker, versions prior to 1.1.0, uses a guessable form of random number generation in creating service brokers UAA client. A remote malicious user may guess the client secret and obtain or modify credentials for users of the CredHub Service.