Skip to content
OpenAdvisories

Product · Cloud Foundry

CAPI (Cloud Foundry Controller)

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 2.7

    Space Developer can extract space-scoped broker credentials

    A user with SpaceDeveloper privileges could modify the URL of a space-scoped broker without altering its credentials, enabling extraction of existing broker credentials by redirecting them to a broker under their control. The CF API does not permit direct rea…