CVE-2019-3782

🗓️ 13 Feb 2019 16:00:00Reported by dellType

Cloud Foundry CredHub CLI, versions prior to 2.2.1, inadvertently writes authentication credentials provided via environment variables to its persistent config file. A local authenticated malicious user with access to the CredHub CLI config file can use these credentials to retrieve and modify credentials stored in CredHub that are authorized to the targeted user

Reporter	Title	Published	Views	Family All 6
Cloud Foundry	CVE-2019-3782: CredHub CLI writes environment variable credentials to disk \| Cloud Foundry	11 Feb 201900:00	–	cloudfoundry
Cvelist	CVE-2019-3782 CredHub CLI writes environment variable credentials to disk	13 Feb 201916:00	–	cvelist
EUVD	EUVD-2019-13413	7 Oct 202500:30	–	euvd
NVD	CVE-2019-3782	13 Feb 201916:29	–	nvd
OSV	CVE-2019-3782	13 Feb 201916:29	–	osv
Prion	Design/Logic Flaw	13 Feb 201916:29	–	prion

NVD

Vulners

Node

cloudfoundry credhub_cliRange<2.2.1

[
  {
    "product": "CredHub CLI",
    "vendor": "Cloud Foundry",
    "versions": [
      {
        "lessThan": "2.2.1",
        "status": "affected",
        "version": "All",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/107038
cloudfoundry	www.cloudfoundry.org/blog/cve-2019-3782

21 Nov 2024 04:42Current

6.7Medium risk

Vulners AI Score6.7

CVSS 22.1

CVSS 3.17.8

CVSS 36.3

EPSS0.00074

CWE-522