CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. See the original NVD description below for full technical details.
CVE
CVE-2020-5422
Severity
MEDIUM
CVSS
6.5
EPSS
0.92%
Original NVD Description
BOSH System Metrics Server releases prior to 0.1.0 exposed the UAA password as a flag to a process running on the BOSH director. It exposed the password to any user or process with access to the same VM (through ps or looking at process details).
Related CVEs
Other vulnerabilities affecting the same vendor(s)