CVE-2020-5422 — UAA password may appear in BOSH System Metrics Server process arguments
BOSH System Metrics Server releases prior to 0.1.0 exposed the UAA password as a flag to a process running on the BOSH director. It exposed the password to any user or process w…
Published: 2020-10-02 · CVSS: Unscored
BOSH System Metrics Server releases prior to 0.1.0 exposed the UAA password as a flag to a process running on the BOSH director. It exposed the password to any user or process with access to the same VM (through ps or looking at process details).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7