Pivotal Software: >> Credhub Service Broker Security Vulnerabilities
Pivotal CredHub Service Broker, versions prior to 1.1.0, uses a guessable form of random number generation in creating service broker's UAA client. A remote malicious user may guess the client secret and obtain or modify credentials for users of the CredHub Service.
CVSS Score
8.1
EPSS Score
0.004
Published
2018-11-13