Vulnerabilities > CVE-2019-11294 - Incorrect Authorization vulnerability in Cloudfoundry Cf-Deployment

047910
CVSS 4.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
SINGLE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
cloudfoundry
CWE-863

Summary

Cloud Foundry Cloud Controller API (CAPI), version 1.88.0, allows space developers to list all global service brokers, including service broker URLs and GUIDs, which should only be accessible to admins.

Vulnerable Configurations

Part Description Count
Application
Cloudfoundry
159

Common Weakness Enumeration (CWE)