Approved changes feed: RSS · Atom

cpe:2.3:a:pivotal_software:pivotal_container_service:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPivotal Software (a7eef617-cad9-5400-bbf0-2e56b16d90a7)
ProductPivotal Container Service (078528cd-41fd-5eb8-80fc-6ec4bdb07a5e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-11273 vulnerable 2026-06-08 05:12:36.785729 PKS Telemetry logs credentials
LOW (2.2)
Pivotal Container Services (PKS) versions 1.3.x prior to 1.3.7, and versions 1.4.x prior to 1.4.1, contains a vulnerable component which logs the username and password to the billing database. A remote authenticated user with access to those logs may be able to retrieve non-sensitive information.
Published: 2019-07-23T22:34:08.022Z
Updated: 2024-09-16T18:04:10.968Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15763 vulnerable 2026-06-08 05:11:03.554498 PKS leaks IaaS Credentials to Application Logs
CRITICAL (9)
Pivotal Container Service, versions prior to 1.2.0, contains an information disclosure vulnerability which exposes IaaS credentials to application logs. A malicious user with access to application logs may be able to obtain IaaS credentials and perform actions using these credentials.
Published: 2018-10-05T21:00:00.000Z
Updated: 2024-09-16T18:48:32.330Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.