Skip to content
OpenAdvisories

Product · Cloud Foundry

CF CLI

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2019-3800

    CF CLI writes the client id and secret to config file

    CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. A local authenticated malicious user with access to the CF CLI config file can act as …

    Cloud Foundry CF CLI CF CLI Release