CVE-2019-3800: anynines elasticsearch Insufficiently Protected Credentials
Vulnerability summary
CVE-2019-3800 is a high (CVSS 7.8) Insufficiently Protected Credentials vulnerability in anynines elasticsearch. EPSS estimates a 2.09% chance of exploitation in the next 30 days, higher than 81.2% of scored vulnerabilities.
Timeline
- 05-08-2019PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. A local authenticated malicious user with access to the CF CLI config file can act as that client, who is the owner of the leaked credentials.
CVSS metrics
3 scores · 2 sources · 2 versions- CVE.orgCNA6.3MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:LDiffers
EPSS trend
Probability
2.09%
Chance of exploitation in the next 30 days
Percentile
81%
Versus all other CVEs
30-day change
0.00 pp
From 2.09% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-522Insufficiently Protected CredentialsThe product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
- CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Affected systems
Pivotal18 products
- application_service≥ 2.3.0, < 2.3.14 | ≥ 2.4.0, < 2.4.10 | ≥ 2.5.0, < 2.5.6
- cloud_foundry_autoscaling_release< 219
- cloud_foundry_command_line_interface< 6.45.0
- cloud_foundry_command_line_interface_release< 1.16.0
- cloud_foundry_deployment< 10.0.0
Appdynamics3 products
- application_analytics< 4.7.652
- application_performance_monitoring< 4.6.64
- platform_montioring< 4.7.712
Newrelic3 products
- dotnet_extension_buildpack< 1.1.1
- nozzle< 1.1.17
- service_broker< 1.12.64
Cloud foundry2 products
- cf cliversions prior to v6.45.0
- cf cli releasev1.x before v1.16.0
Microsoft2 products
- azure_log_analytics_nozzle< 1.4.1
- azure_service_broker< 1.4.1
Apigee1 product
- edge_service_broker< 3.1.3
Bluemedora1 product
- nozzle< 3.1.1
Contrastsecurity1 product
- service_broker< 2.2.0
Cyberark1 product
- conjur_service_broker< 1.1.1
Datadoghq1 product
- application_monitoring< 1.7.0
Datastax1 product
- enterprise_service_broker< 1.0.2
Dynatrace1 product
- service_broker< 1.4.2
Forgerock1 product
- service_broker< 2.1.2
Google1 product
Ibm1 product
- websphere_liberty_< 3.11.0
Pagerduty1 product
- service_broker< 1.2.4
Riverbed1 product
- steelcentral_appinternals< 10.21.1-bl516
Samba1 product
- volume_service< 1.1.1
Signalsciences1 product
- service_broker< 1.1.0
Snyk1 product
- service_broker< 1.0.3
Solace1 product
- pubsub\+< 2.3.2
Splunk1 product
- nozzle< 1.1.1
Sumologic1 product
- nozzle< 1.0.1
Synopsys1 product
- seeker_iast_service_broker< 1.2.14
Tibco1 product
- businessworks_buildpack< 2.4.4
Wavefront1 product
- wavefront_by_vmware_nozzle< 1.0.2
Yugabyte1 product
- db_enterprise< 1.1.8
28 vendors · 57 products