Cloud Foundry / Capi-Release
22 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2023-20881 | Cloud foundry instances having CAPI version between 1.140 and 1.152.0 along with loggregator-agent v7+ may override other users syslog drain credentials if the… | HIGH | 8.1 | May 19, 2023 |
| CVE-2021-22100 | In cloud foundry CAPI versions prior to 1.122, a denial-of-service attack in which a developer can push a service broker that (accidentally or maliciously) cau… | MEDIUM | 5.3 | Mar 25, 2022 |
| CVE-2021-22101 | Cloud Controller versions prior to 1.118.0 are vulnerable to unauthenticated denial of Service(DoS) vulnerability allowing unauthenticated attackers to cause d… | HIGH | 7.5 | Oct 27, 2021 |
| CVE-2021-22115 | Cloud Controller API versions prior to 1.106.0 logs service broker credentials if the default value of db logging config field is changed. CAPI database logs s… | MEDIUM | 6.5 | Apr 8, 2021 |
| CVE-2020-5423 | Cloud Controller is vulnerable to denial of service via YAML parsing | HIGH | 7.5 | Dec 2, 2020 |
| CVE-2020-5418 | Cloud Controller allows users with no roles to list droplets | MEDIUM | 4.3 | Sep 3, 2020 |
| CVE-2020-5417 | Cloud Controller may allow developers to claim sensitive routes | HIGH | 8.8 | Aug 21, 2020 |
| CVE-2020-5400 | Cloud Controller logs environment variables from app manifests | MEDIUM | 6.5 | Feb 27, 2020 |
| CVE-2019-11294 | CAPI leaks service broker URLs and GUIDs to space developers | MEDIUM | 4.3 | Dec 19, 2019 |
| CVE-2019-3798 | Escalation of Privileges in Cloud Controller | HIGH | 7.5 | Apr 17, 2019 |
| CVE-2019-3785 | Cloud Controller provides signed URL with write authorization to read only user | HIGH | 8.1 | Mar 13, 2019 |
| CVE-2016-2169 | Cloud Foundry Cloud Controller, capi-release versions prior to 1.0.0 and cf-release versions prior to v237, contain a business logic flaw. An application devel… | MEDIUM | 5.3 | Apr 18, 2018 |
| CVE-2018-1266 | Cloud Foundry Cloud Controller, versions prior to 1.52.0, contains information disclosure and path traversal vulnerabilities. An authenticated malicious user c… | HIGH | 8.1 | Mar 27, 2018 |
| CVE-2018-1195 | In Cloud Controller versions prior to 1.46.0, cf-deployment versions prior to 1.3.0, and cf-release versions prior to 283, Cloud Controller accepts refresh tok… | HIGH | 8.8 | Mar 19, 2018 |
| CVE-2017-14389 | An issue was discovered in Cloud Foundry Foundation capi-release (all versions prior to 1.45.0), cf-release (all versions prior to v280), and cf-deployment (al… | MEDIUM | 6.5 | Nov 28, 2017 |
| CVE-2017-8037 | In Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.38.0 and cf-release versions after v244 and prior to v270, there is an incomplet… | HIGH | 7.5 | Aug 21, 2017 |
| CVE-2017-8035 | An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.35.0 and cf-release versions… | HIGH | 7.5 | Jul 25, 2017 |
| CVE-2017-8033 | An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions prior to v1.35.0 and cf-release versions prior to v268. A… | HIGH | 7.8 | Jul 25, 2017 |
| CVE-2017-8036 | An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release version 1.33.0 (only). The original fix for CVE-2017-8033 included… | HIGH | 7.8 | Jul 24, 2017 |
| CVE-2017-8034 | The Cloud Controller and Router in Cloud Foundry (CAPI-release capi versions prior to v1.32.0, Routing-release versions prior to v0.159.0, CF-release versions… | MEDIUM | 6.6 | Jul 17, 2017 |
| CVE-2016-8219 | An issue was discovered in Cloud Foundry Foundation cf-release versions prior to 250 and CAPI-release versions prior to 1.12.0. A user with the SpaceAuditor ro… | MEDIUM | 6.5 | Jun 13, 2017 |
| CVE-2016-9882 | An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v250 and CAPI-release versions prior to v1.12.0. Cloud Foundry logs the creden… | HIGH | 7.5 | Jan 13, 2017 |
Showing 1 to 22 of 22 CVEs