Cloud Foundry Cf Deployment vulnerabilities

11 known vulnerabilities affecting cloud_foundry/cf_deployment.

Total CVEs
11
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH7MEDIUM4

Vulnerabilities

Page 1 of 1
CVE-2025-22246HIGHCVSS 7.5≥ v45.1.0, ≤ v48.11.02025-05-13
CVE-2025-22246 [HIGH] CWE-532 CVE-2025-22246: Cloud Foundry UAA release versions from v77.21.0 to v7.31.0 are vulnerable to a private key exposure Cloud Foundry UAA release versions from v77.21.0 to v7.31.0 are vulnerable to a private key exposure in logs.
cvelistv5nvd
CVE-2023-34061HIGHCVSS 7.5≥ 0.28.0, < 33.6.02024-01-12
CVE-2023-34061 [HIGH] CWE-400 CVE-2023-34061: Cloud Foundry routing release versions from v0.163.0 to v0.283.0 are vulnerable to a DOS attack. An Cloud Foundry routing release versions from v0.163.0 to v0.283.0 are vulnerable to a DOS attack. An unauthenticated attacker can use this vulnerability to force route pruning and therefore degrade the service availability of the Cloud Foundry deployment.
cvelistv5nvd
CVE-2023-34041MEDIUMCVSS 5.3≥ all, < 32.4.02023-09-08
CVE-2023-34041 [MEDIUM] CVE-2023-34041: Cloud foundry routing release versions prior to 0.278.0 are vulnerable to abuse of HTTP Hop-by-Hop H Cloud foundry routing release versions prior to 0.278.0 are vulnerable to abuse of HTTP Hop-by-Hop Headers. An unauthenticated attacker can use this vulnerability for headers like B3 or X-B3-SpanID to affect the identification value recorded in the logs in foundations.
cvelistv5nvd
CVE-2020-5423HIGHCVSS 7.5≥ All, < 15.0.02020-12-02
CVE-2020-5423 [HIGH] CWE-400 CVE-2020-5423: CAPI (Cloud Controller) versions prior to 1.101.0 are vulnerable to a denial-of-service attack in wh CAPI (Cloud Controller) versions prior to 1.101.0 are vulnerable to a denial-of-service attack in which an unauthenticated malicious attacker can send specially-crafted YAML files to certain endpoints, causing the YAML parser to consume excessive CPU and RAM.
cvelistv5nvd
CVE-2020-5420HIGHCVSS 7.7≥ All, < 13.15.02020-09-03
CVE-2020-5420 [HIGH] CWE-754 CVE-2020-5420: Cloud Foundry Routing (Gorouter) versions prior to 0.206.0 allow a malicious developer with "cf push Cloud Foundry Routing (Gorouter) versions prior to 0.206.0 allow a malicious developer with "cf push" access to cause denial-of-service to the CF cluster by pushing an app that returns specially crafted HTTP responses that crash the Gorouters.
cvelistv5nvd
CVE-2020-5418MEDIUMCVSS 4.3≥ All, < 13.17.02020-09-03
CVE-2020-5418 [MEDIUM] CWE-863 CVE-2020-5418: Cloud Foundry CAPI (Cloud Controller) versions prior to 1.98.0 allow authenticated users having only Cloud Foundry CAPI (Cloud Controller) versions prior to 1.98.0 allow authenticated users having only the "cloud_controller.read" scope, but no roles in any spaces, to list all droplets in all spaces (whereas they should see none).
cvelistv5nvd
CVE-2020-5417HIGHCVSS 8.8≥ All, < 13.12.02020-08-21
CVE-2020-5417 [HIGH] CWE-732 CVE-2020-5417: Cloud Foundry CAPI (Cloud Controller), versions prior to 1.97.0, when used in a deployment where an Cloud Foundry CAPI (Cloud Controller), versions prior to 1.97.0, when used in a deployment where an app domain is also the system domain (which is true in the default CF Deployment manifest), were vulnerable to developers maliciously or accidentally claiming certain sensitive routes, potentially resulting in the developer's app handling some requests tha
cvelistv5nvd
CVE-2020-5416MEDIUMCVSS 6.5≥ All, < 13.13.02020-08-21
CVE-2020-5416 [MEDIUM] CWE-404 CVE-2020-5416: Cloud Foundry Routing (Gorouter), versions prior to 0.204.0, when used in a deployment with NGINX re Cloud Foundry Routing (Gorouter), versions prior to 0.204.0, when used in a deployment with NGINX reverse proxies in front of the Gorouters, is potentially vulnerable to denial-of-service attacks in which an unauthenticated malicious attacker can send specially-crafted HTTP requests that may cause the Gorouters to be dropped from the NGINX backend poo
cvelistv5nvd
CVE-2019-11283HIGHCVSS 8.8≥ All, < v12.2.02019-10-23
CVE-2019-11283 [HIGH] CWE-532 CVE-2019-11283: Cloud Foundry SMB Volume, versions prior to v2.0.3, accidentally outputs sensitive information to th Cloud Foundry SMB Volume, versions prior to v2.0.3, accidentally outputs sensitive information to the logs. A remote user with access to the SMB Volume logs can discover the username and password for volumes that have been recently created, allowing the user to take control of the SMB Volume.
cvelistv5nvd
CVE-2019-11282MEDIUMCVSS 4.3≥ All, < v12.2.02019-10-23
CVE-2019-11282 [MEDIUM] CWE-200 CVE-2019-11282: Cloud Foundry UAA, versions prior to v74.3.0, contains an endpoint that is vulnerable to SCIM inject Cloud Foundry UAA, versions prior to v74.3.0, contains an endpoint that is vulnerable to SCIM injection attack. A remote authenticated malicious user with scim.invite scope can craft a request with malicious content which can leak information about users of the UAA.
cvelistv5nvd
CVE-2019-11277HIGHCVSS 8.1≥ All, < v11.1.02019-09-23
CVE-2019-11277 [HIGH] CWE-90 CVE-2019-11277: Cloud Foundry NFS Volume Service, 1.7.x versions prior to 1.7.11 and 2.x versions prior to 2.3.0, is Cloud Foundry NFS Volume Service, 1.7.x versions prior to 1.7.11 and 2.x versions prior to 2.3.0, is vulnerable to LDAP injection. A remote authenticated malicious space developer can potentially inject LDAP filters via service instance creation, facilitating the malicious space developer to deny service or perform a dictionary attack.
cvelistv5nvd