CVE-2017-4955: An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.65, 1.7.x versions prior...

Security readout for executives and security teams

CVE-2017-4955 is a credential exposure issue in older Pivotal PCF Elastic Runtime releases. Several credentials were written into Notifications errand logs. If those logs were retained or centrally collected, anyone with log access may have been able to view sensitive secrets. Exposure is likely limited to environments running the listed legacy PCF Elastic Runtime versions and retaining Notifications errand logs. Risk increases where logs are centralized, broadly accessible, or backed up for long periods. Prioritize if the organization ran legacy PCF Elastic Runtime and kept operational logs. This is less about internet-scale exploitation and more about credential leakage through internal observability and log-retention paths. Mitigation focus: Upgrade affected PCF Elastic Runtime versions to the fixed releases or later.; Check Pivotal or successor vendor guidance for product-specific remediation.; Treat credentials found in affected logs as exposed..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.