Cloud Foundry NFS volume release, 1.2.x before 1.2.5, 1.5.x before 1.5.4, 1.7.x before 1.7.3, logs the cf admin username and password when running the nfsbrokerpush BOSH deploy errand. A remote authenticated user with access to BOSH can obtain the admin credentials for the Cloud Foundry Platform through the logs of the NFS volume deploy errand.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
pivotal software cloud foundry nfs volume |