Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
1 selected

2 records

Release: Cloud Foundry Foundation bosh-windows-stemcell-builder 2019.98 Clear all filters
TI-2026-35284 CVE-2026-47831 · GHSA-4qp9-f9vm-49xq

Cryptographically Weak Password Generation in bosh-windows-stemcell-builder Allows Remote SSH Brute-Force Attacks

Priority LOW 36

Use of a cryptographically weak random number generator in the GenerateRandomPassword function in bosh-windows-stemcell-builder allows a remote attacker to brute-force the resulting SSH login via TCP/22.

CVSS 4.0HIGH 7.7 Adjacent network No auth No interaction EPSS 0.00319 Published 2026-07-09 Fixed in 2019.98
TI-2026-35283 CVE-2026-47830 · GHSA-v8gm-j274-p577

Incorrect Permission Assignment Allows Local Privilege Escalation to SYSTEM via Executable Overwrite

Priority LOW 38

Incorrect Permission Assignment in BOSH.Utils.psm1 in BOSH-Ecosystem bosh-windows-stemcell-builder allows low-privilege authenticated users to overwrite C:\bosh\service_wrapper.exe or C:\bosh\bosh-agent.exe and gain NT A…

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00148 Published 2026-07-09 Fixed in 2019.98