High severity · published Mar 8, 2019
CVE-2019-3779
Cloud Foundry Container Runtime allows a user to bypass security policy when talking to ETCD
8.8
CVSS
0.7%
EPSS
No
On KEV
Description
Cloud Foundry Container Runtime, versions prior to 0.29.0, deploys Kubernetes clusters utilize the same CA (Certificate Authority) to sign and trust certs for ETCD as used by the Kubernetes API. This could allow a user authenticated with a cluster to request a signed certificate leveraging the Kubernetes CSR capability to obtain a credential that could escalate privilege access to ETCD.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 52% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CF
Cloud Foundry Container Runtime (CFCR) · Cloud Foundry
All before v0.29.0 · source: vendor
CR
Container Runtime · Cloudfoundry
before 0.29.0 · source: NVD
Affected product
CF
Cloud Foundry Container Runtime (CFCR)
Cloud Foundry
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-3779
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-3779
Vendor Advisory
https://www.cloudfoundry.org/blog/cve-2019-3779
More from Cloud Foundry Container Runtime (CFCR)
8.8
CVE-2019-3780
Cloud Foundry Container Runtime Leaks IAAS Credentials