Cloudfoundry Capi Release vulnerabilities, page 2

22 vulnerabilities

Known vulnerabilities in Cloudfoundry Capi Release, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2019-3798cloud foundrycapi-release+1
EPSS score
1.34%
Cloud Foundry Cloud Controller API Release, versions prior to 1.79.0, contains improper authentication when validating user permissions. A remote authenticated malicious user with the ability to create UAA clients and knowledge of the email of a victim in the foundation may escalate their privileges to that of the victim by creating a client with a name equal to the guid of their victim.8.1CVE-2023-20881cloudfoundrycapi-release+2
EPSS score
0.36%
Cloud foundry instances having CAPI version between 1.140 and 1.152.0 along with loggregator-agent v7+ may override other users syslog drain credentials if they're aware of the client certificate used for that syslog drain. This applies even if the drain has zero certs. This would allow the user to override the private key and add or modify a certificate authority used for the connection.