Skip to content
OpenAdvisories

Product · Cloud Foundry

CF CLI

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2019-3781

    CF CLI does not sanitize user's password in verbose/trace/debug

    Cloud Foundry CLI, versions prior to v6.43.0, improperly exposes passwords when verbose/trace/debugging is turned on. A local unauthenticated or remote authenticated malicious user with access to logs may gain part or all of a users password.

    Cloud Foundry CF CLI