Cloud Foundry Healthwatch

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-3800 Aug 05, 17:15 HIGH This Week

CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure PostgreSQL Google IBM Microsoft +69

NVD

CVSS 3.0

7.8

EPSS

2.1%

CVE-2019-3800

EPSS 2% CVSS 7.8

HIGH This Week

CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure PostgreSQL Google +71

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy