CveMateVulnerability intelligence

Cloud Foundry Bosh System Metrics Server vulnerabilities

1 vulnerability

Known vulnerabilities in Cloud Foundry Bosh System Metrics Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2020-5422cloud_foundrybosh_system_metrics_server6y ago02-10-2020 17:10

BOSH System Metrics Server releases prior to 0.1.0 exposed the UAA password as a flag to a process running on the BOSH director. It exposed the password to any user or process with access to the same VM (through ps or looking at process details).