未評価
Cloud Controller API versions prior to 1.106.0 logs service broker credentials if the default value of db logging config field is changed. CAPI databa...
CVE-2021-22115
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Cloud Controller API versions prior to 1.106.0 logs service broker credentials if the default value of db logging config field is changed. CAPI database logs service broker password in plain text whenever a job to clean up orphaned items is run by Cloud Controller.
参照URL
- advisory cloudfoundry.org