| Package | Affected versions | Patched versions |
|---|---|---|
| bosh | ≥ 270.0.0, < 270.1.1 | 270.1.1 |
Cloud Foundry BOSH 270.x versions prior to v270.1.1, contain a BOSH Director that does not properly redact credentials when configured to use a MySQL database. A local authenticated malicious user may read any credentials that are contained in a BOSH manifest.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free