CVE-2019-11283CWE-532

Password leak in smbdriver logs

High · published October 23, 2019

CVSS v3.0
8.8
EPSS
1%
Percentile
73.3
In the wild
Unconfirmed
What it is

Cloud Foundry SMB Volume, versions prior to v2.0.3, accidentally outputs sensitive information to the logs. A remote user with access to the SMB Volume logs can discover the username and password for volumes that have been recently created, allowing the user to take control of the SMB Volume.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01455 · 73.3th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2019-10-23T15:32Z
EPSS history
Timeline
  • 23 OCT 15:32Z
    Password leak in smbdriver logs
    cvelistv5