CVE-2019-3779: cloud foundry cloud foundry container runtime (cfcr) Improper Access Control
Vulnerability summary
CVE-2019-3779 is a high (CVSS 8.8) Improper Access Control vulnerability in cloud foundry cloud foundry container runtime (cfcr). EPSS estimates a 0.67% chance of exploitation in the next 30 days, higher than 50.9% of scored vulnerabilities.
Timeline
- 08-03-2019PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
Cloud Foundry Container Runtime, versions prior to 0.29.0, deploys Kubernetes clusters utilize the same CA (Certificate Authority) to sign and trust certs for ETCD as used by the Kubernetes API. This could allow a user authenticated with a cluster to request a signed certificate leveraging the Kubernetes CSR capability to obtain a credential that could escalate privilege access to ETCD.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST8.8HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.67%
Chance of exploitation in the next 30 days
Percentile
51%
Versus all other CVEs
30-day change
0.00 pp
From 0.67% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-284Improper Access ControlThe product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
- CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Affected systems
Cloud foundry1 product
- cloud foundry container runtime (cfcr)≥ All, < v0.29.0
Cloudfoundry1 product
- container_runtime< 0.29.0
2 vendors · 2 products