CVE-2016-0898

high-risk

Published 2018-03-29

MySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext. These credentials were logged to the Service Backup component logs, and not the system log, thus were not exposed outside the Service Backup VM.

Do I need to act?

0.29% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 10.0/10 Critical

NETWORK / LOW complexity

Affected Products (14)

Pivotal Software Mysql

Affected Vendors

Vmware

References (4)

Third Party Advisory http://www.securityfocus.com/bid/95146

Vendor Advisory https://pivotal.io/security/cve-2016-0898

Third Party Advisory http://www.securityfocus.com/bid/95146

Vendor Advisory https://pivotal.io/security/cve-2016-0898

/ 100

high-risk

Severity 33/34 · Critical

Exploitability 1/34 · Minimal

Exposure 18/34 · Moderate