Skip to content
OpenAdvisories

Product · Cloud Foundry

CAPI

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2019-11294

    CAPI leaks service broker URLs and GUIDs to space developers

    Cloud Foundry Cloud Controller API (CAPI), version 1.88.0, allows space developers to list all global service brokers, including service broker URLs and GUIDs, which should only be accessible to admins.

    Cloud Foundry CAPI
  • Medium 6.5
    CVE-2019-3785

    Cloud Controller provides signed URL with write authorization to read only user

    Cloud Foundry Cloud Controller, versions prior to 1.78.0, contain an endpoint with improper authorization. A remote authenticated malicious user with read permissions can request package information and receive a signed bit-service url that grants the user wr…

    Cloud Foundry CAPI