High severity · published Aug 5, 2019
CVE-2019-3800
CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag
7.8
CVSS
2.1%
EPSS
No
On KEV
Description
CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. A local authenticated malicious user with access to the CF CLI config file can act as that client, who is the owner of the leaked credentials.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AA
Application Analytics · Appdynamics
before 4.7.652 · source: NVD
AM
Application Monitoring · Datadoghq
before 1.7.0 · source: NVD
AP
Application Performance Monitoring · Appdynamics
before 4.6.64 · source: NVD
AS
Application Service · Pivotal
2.3.0 before 2.3.14; 2.4.0 before 2.4.10; 2.5.0 before 2.5.6 · source: NVD
AL
Azure Log Analytics Nozzle · Microsoft
before 1.4.1 · source: NVD
AS
Azure Service Broker · Microsoft
before 1.4.1 · source: NVD
BB
Businessworks Buildpack · Tibco
before 2.4.4 · source: NVD
CF
Cloud Foundry Autoscaling Release · Pivotal
before 219 · source: NVD
CF
Cloud Foundry Command Line Interface · Pivotal
before 6.45.0 · source: NVD
CF
Cloud Foundry Command Line Interface Release · Pivotal
before 1.16.0 · source: NVD
CF
Cloud Foundry Deployment · Pivotal
before 10.0.0 · source: NVD
CF
Cloud Foundry Deployment Concourse Tasks · Pivotal
before 9.3.0 · source: NVD