CWE Code: 200
Vulnerability Type: privilege_escalation
CVSS Score: 4.0
CWE Name:  Information Exposure
Summary: applications in cf-release before 245 can be configured and pushed with a user-provided custom buildpack using a url pointing to the buildpack. although it is not recommended, a user can specify a credential in the url (basic auth or oauth) to access the buildpack through the cli. for example, the user could include a github username and password in the url to access a private repo. because the url to access the buildpack is stored unencrypted, an operator with privileged access to the cloud controller database could view these credentials.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2018-03-29
Last Modified Date: 2018-04-24