Cloud Foundry Notifications

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-20885 MEDIUM This Month

Vulnerability in Cloud Foundry Notifications, Cloud Foundry SMB-volume release, Cloud FOundry cf-nfs-volume release.1.19; cf-nfs-volume release: 5.0.X versions prior to 5.0.27, 7.1.X versions prior. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Cloud Foundry Nfs Volume Cloud Foundry Notifications Cloud Foundry Smb Volume

NVD

CVSS 3.1

6.5

EPSS

0.5%

CVE-2019-3800 HIGH This Week

CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Cloud Foundry Command Line Interface Cloud Foundry Command Line Interface Release Cloud Foundry Deployment Cloud Foundry Deployment Concourse Tasks +42

NVD

CVSS 3.0

7.8

EPSS

2.1%

CVE-2023-20885

EPSS 1% CVSS 6.5

MEDIUM This Month

Information Disclosure Cloud Foundry Nfs Volume Cloud Foundry Notifications +1

NVD

CVE-2019-3800

EPSS 2% CVSS 7.8

HIGH This Week

Information Disclosure Cloud Foundry Command Line Interface Cloud Foundry Command Line Interface Release +44

NVD