Cloud Foundry

Records84All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high47CVSS 7.0–8.9

Exploited now

Cloud Foundry records in CISA KEV

No Cloud Foundry vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Bosh System Metrics Server · all components

TI-2020-04468 CVE-2020-5422 · GHSA-v9qc-85w7-58x4

LOW 31

BOSH System Metrics Server releases prior to 0.1.0 exposed the UAA password as a flag to a process running on the BOSH director.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00917 Published 2020-10-02 Fixed in 0.1.0 CWE-214