Skip to content
OpenAdvisories

Product · Cloud Foundry

BOSH Backup and Restore

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2019-3786

    BBR could run arbitrary scripts on deployment VMs

    Cloud Foundry BOSH Backup and Restore CLI, all versions prior to 1.5.0, does not check the authenticity of backup scripts in BOSH. A remote authenticated malicious user can modify the metadata file of a Bosh Backup and Restore job to request extra backup file…

    Cloud Foundry BOSH Backup and Restore