Approved changes feed: RSS · Atom

cpe:2.3:a:pivotal_software:cloud_foundry_smb_volume:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPivotal Software (a7eef617-cad9-5400-bbf0-2e56b16d90a7)
ProductCloud Foundry Smb Volume (a202b560-e162-5af9-abb3-9ad555f0210d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/cloudfoundry/smb-volume-release purl2cpe 2026-06-01 10:11:00.565312

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-11283 vulnerable 2026-06-03 14:39:32.631744 Password leak in smbdriver logs
HIGH (8.8)
Cloud Foundry SMB Volume, versions prior to v2.0.3, accidentally outputs sensitive information to the logs. A remote user with access to the SMB Volume logs can discover the username and password for volumes that have been recently created, allowing the user to take control of the SMB Volume.
Published: 2019-10-23T15:32:22.206Z
Updated: 2024-09-17T02:01:09.354Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.