HIGH🇵🇱 Wersja polska

CVE-2019-11271

CVSS 7.8v3.1pub. 2019-06-19upd. 2024-11-21

Cloud Foundry BOSH 270.x versions prior to v270.1.1, contain a BOSH Director that does not properly redact credentials when configured to use a MySQL database. A local authenticated malicious user may read any credentials that are contained in a BOSH manifest.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Cloud Foundry Bosh

    APP
    Cloud Foundry
    270.0.0 – 270.1.1 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2018-11083HIGH8.1same product

Cloud Foundry BOSH, versions v264 prior to v264.14.0 and v265 prior to v265.7.0 and v266 prior to v266.8.0 and...

CVE-2017-4961HIGH8.8same product

An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x v...

CVE-2026-41009MEDIUM4.3same product

Gdy dyrektor wysyła długotrwałe żądanie (np. compile_package), odpowiedź JSON agenta jest konsumowana przez Ag...

CVE-2026-41704MEDIUM6.8same product

AgentClient#handle_method (linie 264-303) przetwarza każdą odpowiedź NATS. Wywołuje inject_compile_log (linia ...

CVE-2018-15800HIGH8.1same vendor

Cloud Foundry Bits Service, versions prior to 2.18.0, includes an information disclosure vulnerability. A remo...