Pivotal Software Pivotal Container Service vulnerabilities
2 vulnerabilities
Known vulnerabilities in Pivotal Software Pivotal Container Service, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-15763pivotal_softwarepivotal_container_service+1
EPSS score0.98%
Pivotal Container Service, versions prior to 1.2.0, contains an information disclosure vulnerability which exposes IaaS credentials to application logs. A malicious user with access to application logs may be able to obtain IaaS credentials and perform actions using these credentials.CVE-2019-11273pivotal_softwarepivotal_container_service+1EPSS score1.03%
Pivotal Container Services (PKS) versions 1.3.x prior to 1.3.7, and versions 1.4.x prior to 1.4.1, contains a vulnerable component which logs the username and password to the billing database. A remote authenticated user with access to those logs may be able to retrieve non-sensitive information.