Skip to content
OpenAdvisories

Product · Cloud Foundry

CredHub

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.6
    CVE-2020-5399

    CredHub does not properly enable TLS for MySQL database connections

    Cloud Foundry CredHub, versions prior to 2.5.10, connects to a MySQL database without TLS even when configured to use TLS. A malicious user with access to the network between CredHub and its MySQL database may eavesdrop on database connections and thereby gai…

    Cloud Foundry CredHub
  • High 8.7
    CVE-2019-3801

    Java Projects using HTTP to fetch dependencies

    Cloud Foundry cf-deployment, versions prior to 7.9.0, contain java components that are using an insecure protocol to fetch dependencies when building. A remote unauthenticated malicious attacker could hijack the DNS entry for the dependency, and inject malici…

    Cloud Foundry Pivotal CF Deployment UAA Release (OSS)