CVE-2016-0898

Severity: critical (CVSS 10.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-03-29 · updated 2026-06-17
Weakness: CWE-255

Description

MySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext. These credentials were logged to the Service Backup component logs, and not the system log, thus were not exposed outside the Service Backup VM.

Affected products

VMware Pivotal Software Mysql: 1.7.0, 1.7.0.1, 1.7.0.2, 1.7.0.3, 1.7.0.4, 1.7.1 (+8)

References

http://www.securityfocus.com/bid/95146
https://pivotal.io/security/cve-2016-0898
http://www.securityfocus.com/bid/95146
https://pivotal.io/security/cve-2016-0898

Get alerted when CVE-2016-0898 or the next vulnerability affects your stack