CA
Product
Capi-release
22
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 13Medium 9Low 0
Watch
Add Capi-release to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-5417 | 8.8 | Aug 21 | Cloud Foundry CAPI (Cloud Controller), versions prior to 1.97.0, when used in a deployment where an app domain is also the system domain (which is true in the default CF… Affected: before 1.97.0 |
| CVE-2018-1195 | 8.8 | Mar 19 | In Cloud Controller versions prior to 1.46.0, cf-deployment versions prior to 1.3.0, and cf-release versions prior to 283, Cloud Controller accepts refresh tokens for… Affected: before 1.46.0 |
| CVE-2023-20881 | 8.1 | May 19 | Cloud foundry instances having CAPI version between 1.140 and 1.152.0 along with loggregator-agent v7+ may override other users syslog drain credentials if they're aware of the… Affected: 1.140 through 1.152.0 |
| CVE-2019-3785 | 8.1 | Mar 13 | Cloud Controller provides signed URL with write authorization to read only user Affected: before 1.78.0 |
| CVE-2018-1266 | 8.1 | Mar 27 | Cloud Foundry Cloud Controller, versions prior to 1.52.0, contains information disclosure and path traversal vulnerabilities Affected: before 1.52.0 |
| CVE-2017-8033 | 7.8 | Jul 25 | An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions prior to v1.35.0 and cf-release versions prior to v268 Affected: before 1.35.0 |
| CVE-2017-8036 | 7.8 | Jul 24 | An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release version 1.33.0 (only) Affected: 1.33.0 |
| CVE-2021-22101 | 7.5 | Oct 27 | Cloud Controller versions prior to 1.118.0 are vulnerable to unauthenticated denial of Service(DoS) vulnerability allowing unauthenticated attackers to cause denial of service by… Affected: before 1.118.0 |
| CVE-2020-5423 | 7.5 | Dec 2 | CAPI (Cloud Controller) versions prior to 1.101.0 are vulnerable to a denial-of-service attack in which an unauthenticated malicious attacker can send specially-crafted YAML files… Affected: before 1.101.0 |
| CVE-2019-3798 | 7.5 | Apr 17 | Cloud Foundry Cloud Controller API Release, versions prior to 1.79.0, contains improper authentication when validating user permissions Affected: before 1.79.0 |
| CVE-2017-8037 | 7.5 | Aug 21 | In Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.38.0 and cf-release versions after v244 and prior to v270, there is an incomplete fix for… Affected: 1.7.0; 1.8.0; 1.9.0; 1.10.0; 1.11.0; 1.12.0; +25 more |
| CVE-2017-8035 | 7.5 | Jul 25 | An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.35.0 and cf-release versions after v244 and… Affected: 1.7.0 before 1.35.0 |
| CVE-2016-9882 | 7.5 | Jan 13 | An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v250 and CAPI-release versions prior to v1.12.0 Affected: through 1.11.0 |
| CVE-2017-8034 | 6.6 | Jul 17 | The Cloud Controller and Router in Cloud Foundry (CAPI-release capi versions prior to v1.32.0, Routing-release versions prior to v0.159.0, CF-release versions prior to v267) do… Affected: through 1.31.0 |
| CVE-2021-22115 | 6.5 | Apr 8 | Cloud Controller API versions prior to 1.106.0 logs service broker credentials if the default value of db logging config field is changed Affected: before 1.106.0 |
| CVE-2020-5400 | 6.5 | Feb 27 | Cloud Foundry Cloud Controller (CAPI), versions prior to 1.91.0, logs properties of background jobs when they are run, which may include sensitive information such as credentials… Affected: before 1.91.0 |
| CVE-2017-14389 | 6.5 | Nov 28 | An issue was discovered in Cloud Foundry Foundation capi-release (all versions prior to 1.45.0), cf-release (all versions prior to v280), and cf-deployment (all versions prior to… Affected: before 1.45.0 |
| CVE-2016-8219 | 6.5 | Jun 13 | An issue was discovered in Cloud Foundry Foundation cf-release versions prior to 250 and CAPI-release versions prior to 1.12.0 Affected: before 1.12.0 |
| CVE-2021-22100 | 5.3 | Mar 25 | In cloud foundry CAPI versions prior to 1.122, a denial-of-service attack in which a developer can push a service broker that (accidentally or maliciously) causes CC instances to… Affected: before 1.122.0 |
| CVE-2016-2169 | 5.3 | Apr 18 | Cloud Foundry Cloud Controller, capi-release versions prior to 1.0.0 and cf-release versions prior to v237, contain a business logic flaw Affected: before 1.0.0 |
| CVE-2020-5418 | 4.3 | Sep 3 | Cloud Foundry CAPI (Cloud Controller) versions prior to 1.98.0 allow authenticated users having only the "cloud_controller.read" scope, but no roles in any spaces, to list all… Affected: before 1.98.0 |
| CVE-2019-11294 | 4.3 | Dec 19 | Cloud Foundry Cloud Controller API (CAPI), version 1.88.0, allows space developers to list all global service brokers, including service broker URLs and GUIDs, which should only… Affected: 1.88.0 |
Showing 22