Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2018-1195 | 1 Pivotal Software | 3 Cf-deployment, Cf-release, Cloud Controller | 2024-02-04 | 6.5 MEDIUM | 8.8 HIGH |
In Cloud Controller versions prior to 1.46.0, cf-deployment versions prior to 1.3.0, and cf-release versions prior to 283, Cloud Controller accepts refresh tokens for authentication where access tokens are expected. This exposes a vulnerability where a refresh token that would otherwise be insufficient to obtain an access token, either due to lack of client credentials or revocation, would allow authentication. | |||||
CVE-2017-14390 | 1 Pivotal Software | 1 Cf-deployment | 2024-02-04 | 5.0 MEDIUM | 7.5 HIGH |
In Cloud Foundry Foundation cf-deployment v0.35.0, a misconfiguration with Loggregator and syslog-drain causes logs to be drained to unintended locations. |