Cloud Foundry Cloud Controller API (CAPI), version 1.88.0, allows space developers to list all global service brokers, including service broker URLs and GUIDs, which should only be accessible to admins.
References
Link | Resource |
---|---|
https://www.cloudfoundry.org/blog/cve-2019-11294 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
17 Aug 2021, 15:30
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:cloudfoundry:capi-release:1.88.0:*:*:*:*:*:*:* |
Information
Published : 2019-12-19 20:15
Updated : 2024-02-04 20:39
NVD link : CVE-2019-11294
Mitre link : CVE-2019-11294
CVE.ORG link : CVE-2019-11294
JSON object : View
Products Affected
cloudfoundry
- capi-release
- cf-deployment