CVE-2018-1223

8.8 highEPSS 0.9%

Cloud Foundry Container Runtime (kubo-release), versions prior to 0.14.0, may leak UAA and vCenter credentials to application logs. A malicious user with the ability to read the application logs could use these credentials to escalate privileges.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-532
Published: 2018-09-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

pivotal:cloud_foundry_container_runtime

References

https://www.cloudfoundry.org/blog/cve-2018-1223/
https://www.cloudfoundry.org/blog/cve-2018-1223/

Check your stack JSON