Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
UAA password may appear in BOSH System Metrics Server process arguments
Vulnerability Description
BOSH System Metrics Server releases prior to 0.1.0 exposed the UAA password as a flag to a process running on the BOSH director. It exposed the password to any user or process with access to the same VM (through ps or looking at process details).
CVSS Information
N/A
Vulnerability Type
通过处理环境导致的信息暴露
Vulnerability Title
BOSH System Metrics Server 安全漏洞
Vulnerability Description
bosh system metrics server是 BOSH System Metrics Server 0.1.0之前版本存在安全漏洞，该漏洞源于暴露了UAA密码作为进程运行在国旗波什导演。它暴露了密码的任何用户或进程访问同一个VM(通过ps或查看流程细节)。
CVSS Information
N/A
Vulnerability Type
N/A