CVE-2017-4955

9.8 criticalEPSS 1.4%

An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.65, 1.7.x versions prior to 1.7.48, 1.8.x versions prior to 1.8.28, and 1.9.x versions prior to 1.9.5. Several credentials were present in the logs for the Notifications errand in the PCF Elastic Runtime tile.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-532
Published: 2017-06-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

pivotal_software:cloud_foundry_elastic_runtime

References

http://www.securityfocus.com/bid/97082
https://pivotal.io/security/cve-2017-4955
http://www.securityfocus.com/bid/97082
https://pivotal.io/security/cve-2017-4955

Check your stack JSON