Description
Pivotal Cloud Foundry On Demand Services SDK, versions prior to 0.24 contain an insecure method of verifying credentials. A remote unauthenticated malicious user may make many requests to the service broker with different credentials, allowing them to infer valid credentials and gain access to perform broker operations.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Pivotal | On Demand Services SDK | all versions – < 0.24.0 | 0.24.0 |