Vulnerabilities > CVE-2019-11294 - Incorrect Authorization vulnerability in Cloudfoundry Cf-Deployment

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

network

low complexity

cloudfoundry

CWE-863

NVD

Published: 2019-12-19

Updated: 2021-08-17

Summary

Cloud Foundry Cloud Controller API (CAPI), version 1.88.0, allows space developers to list all global service brokers, including service broker URLs and GUIDs, which should only be accessible to admins.

Vulnerable Configurations

Part	Description	Count
Application	Cloudfoundry Cloudfoundry CF Deployment - Cloudfoundry CF Deployment 0.0.0 Cloudfoundry CF Deployment 0.0.1 Cloudfoundry CF Deployment 0.0.2 Cloudfoundry CF Deployment 0.1.0 Cloudfoundry CF Deployment 0.2.0 Cloudfoundry CF Deployment 0.2.1 Cloudfoundry CF Deployment 0.2.2 Cloudfoundry CF Deployment 0.3.0 Cloudfoundry CF Deployment 0.4.0 Cloudfoundry CF Deployment 0.5.0 Cloudfoundry CF Deployment 0.7.0 Cloudfoundry CF Deployment 0.8.0 Cloudfoundry CF Deployment 0.9.0 Cloudfoundry CF Deployment 0.9.1 Cloudfoundry CF Deployment 0.10.0 Cloudfoundry CF Deployment 0.11.0 Cloudfoundry CF Deployment 0.12.0 Cloudfoundry CF Deployment 0.13.0 Cloudfoundry CF Deployment 0.14.0 Cloudfoundry CF Deployment 0.15.0 Cloudfoundry CF Deployment 0.16.0 Cloudfoundry CF Deployment 0.17.0 Cloudfoundry CF Deployment 0.18.0 Cloudfoundry CF Deployment 0.19.0 Cloudfoundry CF Deployment 0.20.0 Cloudfoundry CF Deployment 0.21.0 Cloudfoundry CF Deployment 0.22.0 Cloudfoundry CF Deployment 0.23.0 Cloudfoundry CF Deployment 0.24.0 Cloudfoundry CF Deployment 0.25.0 Cloudfoundry CF Deployment 0.26.0 Cloudfoundry CF Deployment 0.27.0 Cloudfoundry CF Deployment 0.28.0 Cloudfoundry CF Deployment 0.29.0 Cloudfoundry CF Deployment 0.30.0 Cloudfoundry CF Deployment 0.31.0 Cloudfoundry CF Deployment 0.32.0 Cloudfoundry CF Deployment 0.32.1 Cloudfoundry CF Deployment 0.33.0 Cloudfoundry CF Deployment 0.34.0 Cloudfoundry CF Deployment 0.35.0 Cloudfoundry CF Deployment 0.36.0 Cloudfoundry CF Deployment 0.37.0 Cloudfoundry CF Deployment 1.0.0 Cloudfoundry CF Deployment 1.1.0 Cloudfoundry CF Deployment 1.2.0 Cloudfoundry CF Deployment 1.3.0 Cloudfoundry CF Deployment 1.3.1 Cloudfoundry CF Deployment 1.4.0 Cloudfoundry CF Deployment 1.5.0 Cloudfoundry CF Deployment 1.6.0 Cloudfoundry CF Deployment 1.7.0 Cloudfoundry CF Deployment 1.8.0 Cloudfoundry CF Deployment 1.9.0 Cloudfoundry CF Deployment 1.10.0 Cloudfoundry CF Deployment 1.11.0 Cloudfoundry CF Deployment 1.12.0 Cloudfoundry CF Deployment 1.13.0 Cloudfoundry CF Deployment 1.14.0 Cloudfoundry CF Deployment 1.15.0 Cloudfoundry CF Deployment 1.16.0 Cloudfoundry CF Deployment 1.17.0 Cloudfoundry CF Deployment 1.18.0 Cloudfoundry CF Deployment 1.19.0 Cloudfoundry CF Deployment 1.20.0 Cloudfoundry CF Deployment 1.21.0 Cloudfoundry CF Deployment 1.22.0 Cloudfoundry CF Deployment 1.23.0 Cloudfoundry CF Deployment 1.24.0 Cloudfoundry CF Deployment 1.25.0 Cloudfoundry CF Deployment 1.26.0 Cloudfoundry CF Deployment 1.27.0 Cloudfoundry CF Deployment 1.28.0 Cloudfoundry CF Deployment 1.29.0 Cloudfoundry CF Deployment 1.30.0 Cloudfoundry CF Deployment 1.31.0 Cloudfoundry CF Deployment 1.32.0 Cloudfoundry CF Deployment 1.33.0 Cloudfoundry CF Deployment 1.34.0 Cloudfoundry CF Deployment 1.35.0 Cloudfoundry CF Deployment 1.36.0 Cloudfoundry CF Deployment 1.37.0 Cloudfoundry CF Deployment 1.38.0 Cloudfoundry CF Deployment 1.39.0 Cloudfoundry CF Deployment 1.40.0 Cloudfoundry CF Deployment 2.0.0 Cloudfoundry CF Deployment 2.1.0 Cloudfoundry CF Deployment 2.2.0 Cloudfoundry CF Deployment 2.3.0 Cloudfoundry CF Deployment 2.4.0 Cloudfoundry CF Deployment 2.5.0 Cloudfoundry CF Deployment 2.6.0 Cloudfoundry CF Deployment 2.7.0 Cloudfoundry CF Deployment 2.8.0 Cloudfoundry CF Deployment 2.9.0 Cloudfoundry CF Deployment 3.0.0 Cloudfoundry CF Deployment 3.1.0 Cloudfoundry CF Deployment 3.2.0 Cloudfoundry CF Deployment 3.3.0 Cloudfoundry CF Deployment 3.4.0 Cloudfoundry CF Deployment 3.5.0 Cloudfoundry CF Deployment 3.6.0 Cloudfoundry CF Deployment 4.0.0 Cloudfoundry CF Deployment 4.1.0 Cloudfoundry CF Deployment 4.2.0 Cloudfoundry CF Deployment 4.3.0 Cloudfoundry CF Deployment 4.4.0 Cloudfoundry CF Deployment 4.5.0 Cloudfoundry CF Deployment 5.0.0 Cloudfoundry CF Deployment 5.1.0 Cloudfoundry CF Deployment 5.2.0 Cloudfoundry CF Deployment 5.3.0 Cloudfoundry CF Deployment 5.4.0 Cloudfoundry CF Deployment 5.5.0 Cloudfoundry CF Deployment 6.0.0 Cloudfoundry CF Deployment 6.1.0 Cloudfoundry CF Deployment 6.2.0 Cloudfoundry CF Deployment 6.3.0 Cloudfoundry CF Deployment 6.4.0 Cloudfoundry CF Deployment 6.5.0 Cloudfoundry CF Deployment 6.6.0 Cloudfoundry CF Deployment 6.7.0 Cloudfoundry CF Deployment 6.8.0 Cloudfoundry CF Deployment 6.9.0 Cloudfoundry CF Deployment 6.10.0 Cloudfoundry CF Deployment 7.0.0 Cloudfoundry CF Deployment 7.1.0 Cloudfoundry CF Deployment 7.2.0 Cloudfoundry CF Deployment 7.3.0 Cloudfoundry CF Deployment 7.4.0 Cloudfoundry CF Deployment 7.5.0 Cloudfoundry CF Deployment 7.6.0 Cloudfoundry CF Deployment 7.7.0 Cloudfoundry CF Deployment 7.8.0 Cloudfoundry CF Deployment 7.9.0 Cloudfoundry CF Deployment 7.10.0 Cloudfoundry CF Deployment 7.11.0 Cloudfoundry CF Deployment 8.0.0 Cloudfoundry CF Deployment 8.1.0 Cloudfoundry CF Deployment 9.0.0 Cloudfoundry CF Deployment 9.1.0 Cloudfoundry CF Deployment 9.2.0 Cloudfoundry CF Deployment 9.3.0 Cloudfoundry CF Deployment 9.4.0 Cloudfoundry CF Deployment 9.5.0 Cloudfoundry CF Deployment 10.0.0 Cloudfoundry CF Deployment 10.1.0 Cloudfoundry CF Deployment 11.0.0 Cloudfoundry CF Deployment 11.1.0 Cloudfoundry CF Deployment 11.2.0 Cloudfoundry CF Deployment 12.0.0 Cloudfoundry CF Deployment 12.1.0 Cloudfoundry CF Deployment 12.2.0 Cloudfoundry CF Deployment 12.3.0 Cloudfoundry CF Deployment 12.4.0 Cloudfoundry CF Deployment 12.5.0 Cloudfoundry CF Deployment 12.6.0 Cloudfoundry Capi Release 1.88.0	159

Common Weakness Enumeration (CWE)

CWE-863 - Incorrect Authorization

References

https://www.cloudfoundry.org/blog/cve-2019-11294