VULNERABILITY INTELLIGENCE

CVE-2019-11271

CVSS score7.8 HIGH

EPSS probability0.29%

CISA KEVNot currently listed

Published2019-06-19

Last modified2026-06-17

Description

Cloud Foundry BOSH 270.x versions prior to v270.1.1, contain a BOSH Director that does not properly redact credentials when configured to use a MySQL database. A local authenticated malicious user may read any credentials that are contained in a BOSH manifest.