CVE-2019-11273CWE-532

PKS Telemetry logs credentials

Low · published July 23, 2019

CVSS v3.0
2.2
EPSS
1%
Percentile
63.4
In the wild
Unconfirmed
What it is

Pivotal Container Services (PKS) versions 1.3.x prior to 1.3.7, and versions 1.4.x prior to 1.4.1, contains a vulnerable component which logs the username and password to the billing database. A remote authenticated user with access to those logs may be able to retrieve non-sensitive information.

The record
Technical detail
CVSS v3.0
2.2 · LOW
Vector
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01032 · 63.4th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2019-07-23T22:34Z
EPSS history
Timeline
  • 23 JUL 22:34Z
    PKS Telemetry logs credentials
    cvelistv5