Skip to main content

Command Line Interface CVE-2019-3781

HIGH
Insertion of Sensitive Information Into Debugging Code (CWE-215)
2019-03-07 security_alert@emc.com
Information Disclosure Command Line Interface
8.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
8.8 HIGH
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Mar 07, 2019 - 18:29 nvd
HIGH 8.8

DescriptionNVD

Cloud Foundry CLI, versions prior to v6.43.0, improperly exposes passwords when verbose/trace/debugging is turned on. A local unauthenticated or remote authenticated malicious user with access to logs may gain part or all of a users password.

AnalysisAI

Cloud Foundry CLI, versions prior to v6.43.0, improperly exposes passwords when verbose/trace/debugging is turned on. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-215. Cloud Foundry CLI, versions prior to v6.43.0, improperly exposes passwords when verbose/trace/debugging is turned on. A local unauthenticated or remote authenticated malicious user with access to logs may gain part or all of a users password. Affected products include: Cloudfoundry Command Line Interface.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Command Line Interface

View all
CVE-2020-10256 CRITICAL
9.8 Oct 27

An issue was discovered in beta versions of the 1Password command-line tool prior to 0.5.5 and in beta versions of the 1
CVE-2023-50974 MEDIUM POC
5.5 Jan 09

In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a ~/.appw
CVE-2021-41092 HIGH
7.5 Oct 04

Docker CLI is the command line interface for the docker container runtime. Rated high severity (CVSS 7.5), this vulnerab
CVE-2025-15558 HIGH
7.0 Mar 04

Local privilege escalation in Docker CLI for Windows (through version 29.1.5) lets a low-privileged user plant malicious
CVE-2022-32550 MEDIUM
4.8 Jun 15

An issue was discovered in AgileBits 1Password, involving the method various 1Password apps and integrations used to cre

Same weakness CWE-215 – Insertion of Sensitive Information Into Debugging Code

View all
CVE-2022-0721 MEDIUM POC
6.5
CVE-2024-7569 CRITICAL
9.8
CVE-2018-1191 HIGH
8.8
CVE-2025-27684 HIGH
7.5
CVE-2026-2250 HIGH
7.5
CVE-2025-34081 HIGH
7.5
CVE-2023-51390 HIGH
7.5
CVE-2026-44934 HIGH
7.0

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2019-3781 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy