What’s Vulnerable › Vulnerabilities

CVE-2018-15797: NFS Volume release errand leaks cf admin credentials in logs

• Severity: high (CVSS 8.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-12-05 · updated 2026-06-17
• Weakness: CWE-532

Description

Cloud Foundry NFS volume release, 1.2.x prior to 1.2.5, 1.5.x prior to 1.5.4, 1.7.x prior to 1.7.3, logs the cf admin username and password when running the nfsbrokerpush BOSH deploy errand. A remote authenticated user with access to BOSH can obtain the admin credentials for the Cloud Foundry Platform through the logs of the NFS volume deploy errand.

Affected products

• Cloud Foundry NFS Volume Release: from 1.2.0 before 1.2.5; from 1.5.0 before 1.5.4; from 1.7.0 before 1.7.3 — fixed in 1.2.5, 1.5.4, 1.7.3

How to fix

Upgrade to a fixed version: Cloud Foundry NFS Volume Release 1.2.5, 1.5.4, 1.7.3. Check the vendor advisory for mitigations.

References

• https://www.cloudfoundry.org/blog/cve-2018-15797
• https://www.cloudfoundry.org/blog/cve-2018-15797

Get alerted when CVE-2018-15797 or the next vulnerability affects your stack