What’s Vulnerable › Vulnerabilities
CVE-2019-11273: PKS Telemetry logs credentials
- Severity: medium (CVSS 4.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.0% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2019-07-23 · updated 2026-06-17
- Weakness: CWE-532
Description
Pivotal Container Services (PKS) versions 1.3.x prior to 1.3.7, and versions 1.4.x prior to 1.4.1, contains a vulnerable component which logs the username and password to the billing database. A remote authenticated user with access to those logs may be able to retrieve non-sensitive information.
Affected products
- Pivotal Container Service (PKS): from 1.3.0 before 1.3.7; from 1.4.0 before 1.4.1 — fixed in 1.3.7, 1.4.1
How to fix
Upgrade to a fixed version: Pivotal Container Service (PKS) 1.3.7, 1.4.1. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2019-11273 or the next vulnerability affects your stack