Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

CVE-2020-5422

UAA password may appear in BOSH System Metrics Server process arguments

BOSH System Metrics Server releases prior to 0.1.0 exposed the UAA password as a flag to a process running on the BOSH director. It exposed the password to any user or process with access to the same VM (through ps or looking at process details).

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Cloud Foundry
Products
Bosh System Metrics Server