Skip to content
OpenAdvisories

Product · Cloud Foundry

bosh-windows-stemcell-builder

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-47831

    Cryptographically Weak Password Generation in bosh-windows-stemcell-builder Allows Remote SSH Brute-Force Attacks

    Use of a cryptographically weak random number generator in the GenerateRandomPassword function in bosh-windows-stemcell-builder allows a remote attacker to brute-force the resulting SSH login via TCP/22. Affected versions: bosh-windows-stemcell-builder versio…

    Cloud Foundry bosh-windows-stemcell-builder Windows
  • High 8.8
    CVE-2026-47830

    Incorrect Permission Assignment Allows Local Privilege Escalation to SYSTEM via Executable Overwrite

    Incorrect Permission Assignment in BOSH.Utils.psm1 in BOSH-Ecosystem bosh-windows-stemcell-builder allows low-privilege authenticated users to overwrite C:\bosh\service_wrapper.exe or C:\bosh\bosh-agent.exe and gain NT AUTHORITY\SYSTEM on the next service res…

    Cloud Foundry bosh-windows-stemcell-builder Windows