CVE-2016-0898

10.0 criticalEPSS 1.4%

MySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext. These credentials were logged to the Service Backup component logs, and not the system log, thus were not exposed outside the Service Backup VM.

Severity

CVSS 3.1

10.0 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWEs: CWE-255, CWE-532
Published: 2018-03-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

vmware:pivotal_software_mysql

References

http://www.securityfocus.com/bid/95146
https://pivotal.io/security/cve-2016-0898
http://www.securityfocus.com/bid/95146
https://pivotal.io/security/cve-2016-0898

Check your stack JSON