CVE-2019-3781
07.03.2019, 18:29
Cloud Foundry CLI, versions prior to v6.43.0, improperly exposes passwords when verbose/trace/debugging is turned on. A local unauthenticated or remote authenticated malicious user with access to logs may gain part or all of a users password.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| cloudfoundry | command_line_interface | 𝑥 < 6.43.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-215 - Insertion of Sensitive Information Into Debugging CodeThe application inserts sensitive information into debugging code, which could expose this information if the debugging code is not disabled in production.
- CWE-200 - Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.