CA
Product
Capi-release
22
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 13Medium 9Low 0
Watch
Add Capi-release to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-5417 | 8.8 | Aug 21 | Cloud Foundry CAPI (Cloud Controller), versions prior to 1.97.0, when used in a deployment where an app domain is also the system domain (which is true in the default CF… Affected: before 1.97.0 |
| CVE-2018-1195 | 8.8 | Mar 19 | In Cloud Controller versions prior to 1.46.0, cf-deployment versions prior to 1.3.0, and cf-release versions prior to 283, Cloud Controller accepts refresh tokens for… Affected: before 1.46.0 |
| CVE-2023-20881 | 8.1 | May 19 | Cloud foundry instances having CAPI version between 1.140 and 1.152.0 along with loggregator-agent v7+ may override other users syslog drain credentials if they're aware of the… Affected: 1.140 through 1.152.0 |
| CVE-2019-3785 | 8.1 | Mar 13 | Cloud Controller provides signed URL with write authorization to read only user Affected: before 1.78.0 |
| CVE-2018-1266 | 8.1 | Mar 27 | Cloud Foundry Cloud Controller, versions prior to 1.52.0, contains information disclosure and path traversal vulnerabilities Affected: before 1.52.0 |
| CVE-2017-8033 | 7.8 | Jul 25 | An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions prior to v1.35.0 and cf-release versions prior to v268 Affected: before 1.35.0 |
| CVE-2017-8036 | 7.8 | Jul 24 | An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release version 1.33.0 (only) Affected: 1.33.0 |
| CVE-2021-22101 | 7.5 | Oct 27 | Cloud Controller versions prior to 1.118.0 are vulnerable to unauthenticated denial of Service(DoS) vulnerability allowing unauthenticated attackers to cause denial of service by… Affected: before 1.118.0 |
| CVE-2020-5423 | 7.5 | Dec 2 | CAPI (Cloud Controller) versions prior to 1.101.0 are vulnerable to a denial-of-service attack in which an unauthenticated malicious attacker can send specially-crafted YAML files… Affected: before 1.101.0 |
| CVE-2019-3798 | 7.5 | Apr 17 | Cloud Foundry Cloud Controller API Release, versions prior to 1.79.0, contains improper authentication when validating user permissions Affected: before 1.79.0 |
| CVE-2017-8037 | 7.5 | Aug 21 | In Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.38.0 and cf-release versions after v244 and prior to v270, there is an incomplete fix for… Affected: 1.7.0; 1.8.0; 1.9.0; 1.10.0; 1.11.0; 1.12.0; +25 more |
| CVE-2017-8035 | 7.5 | Jul 25 | An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.35.0 and cf-release versions after v244 and… Affected: 1.7.0 before 1.35.0 |
| CVE-2016-9882 | 7.5 | Jan 13 | An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v250 and CAPI-release versions prior to v1.12.0 Affected: through 1.11.0 |
Showing 13