CVE-2025-22246

published 2025-05-13

CVE-2025-22246: Cloud Foundry UAA release versions from v77.21.0 to v7.31.0 are vulnerable to a private key exposure in logs.

Priority P3 40 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

Cloud Foundry UAA release versions from v77.21.0 to v7.31.0 are vulnerable to a private key exposure in logs.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
cloud_foundry	cf_deployment	v45.1.0 – v48.11.0	—
cloud_foundry	uaa	>= v77.21.0 < v77.32.0	v77.32.0
cloudfoundry	cf-deployment	>= 45.1.0 < 49.0.0	49.0.0
cloudfoundry	uaa_release	>= 77.21.0 < 77.32.0	77.32.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-532