Lucene search

[email protected]CVE-2019-3800

HistoryAug 05, 2019 - 5:15 p.m.

CVE-2019-3800

2019-08-0517:15:10

CWE-522

CWE-200

[email protected]

web.nvd.nist.gov

cve-2019-3800

cf cli

configuration file

client credentials

security vulnerability

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.6%

JSON

CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. A local authenticated malicious user with access to the CF CLI config file can act as that client, who is the owner of the leaked credentials.

Affected configurations

NVD

Node

pivotalcloud_foundry_command_line_interfaceRange<6.45.0

pivotalcloud_foundry_command_line_interface_releaseRange<1.16.0

pivotalcloud_foundry_deploymentRange<10.0.0

pivotalcloud_foundry_deployment_concourse_tasksRange<9.3.0

pivotalcloud_foundry_log_cache_releaseRange<2.3.1

pivotalcloud_foundry_networking_releaseRange<2.23.0

pivotalcloud_foundry_notificationsRange<58

pivotalcloud_foundry_routing_releaseRange<0.189.0

pivotalcloud_foundry_smoke_testRange<40.0.113

Node

pivotalapplication_serviceRange2.3.0–2.3.14

pivotalapplication_serviceRange2.4.0–2.4.10

pivotalapplication_serviceRange2.5.0–2.5.6

pivotalcloud_foundry_autoscaling_releaseRange<219

pivotalcloud_foundry_event_alertsRange<1.2.8

pivotalcloud_foundry_healthwatchRange1.4.0–1.4.7

pivotalcloud_foundry_healthwatchRange1.5.0–1.5.4

pivotalcredhub_service_broker_for_pcfRange<1.3.2

pivotalmetric_registrar_releaseRange<1.2

pivotalon_demand_service_brokerRange<0.29.0

pivotalpivotal_cloud_foundry_service_brokerRange<1.4.13aws

pivotalsingle_sign-onRange1.7.0–1.7.5cloud_foundry

pivotalsingle_sign-onRange1.8.0–1.8.4cloud_foundry

pivotalsingle_sign-onRange1.9.0–1.9.1cloud_foundry

Node

anynineselasticsearchRange<2.1.2pivotal_cloud_foundry

anynineslogmeRange<2.1.2pivotal_cloud_foundry

anyninesmongodbRange<2.1.2pivotal_cloud_foundry

anyninesmysqlRange<2.1.2pivotal_cloud_foundry

anyninespostgresqlRange<2.1.2pivotal_cloud_foundry

anyninesrabbitmqRange<2.1.2pivotal_cloud_foundry

anyninesredisRange<2.1.2pivotal_cloud_foundry

apigeeedge_service_brokerRange<3.1.3pivotal_cloud_foundry

appdynamicsapplication_analyticsRange<4.7.652pivotal_cloud_foundry

appdynamicsapplication_performance_monitoringRange<4.6.64pivotal_cloud_foundry

appdynamicsplatform_montioringRange<4.7.712pivotal_cloud_foundry

bluemedoranozzleRange<3.1.1pivotal_cloud_foundry

contrastsecurityservice_brokerRange<2.2.0pivotal_cloud_foundry

cyberarkconjur_service_brokerRange<1.1.1pivotal_cloud_foundry

datadoghqapplication_monitoringRange<1.7.0pivotal_cloud_foundry

datastaxenterprise_service_brokerRange<1.0.2pivotal_cloud_foundry

dynatraceservice_brokerRange<1.4.2pivotal_cloud_foundry

forgerockservice_brokerRange<2.1.2pivotal_cloud_foundry

googlegoogle_cloud_platform_service_brokerRange<4.2.3pivotal_cloud_foundry

ibmwebsphere_liberty_Range<3.11.0pivotal_cloud_foundry

microsoftazure_log_analytics_nozzleRange<1.4.1pivotal_cloud_foundry

microsoftazure_service_brokerRange<1.4.1pivotal_cloud_foundry

newrelicdotnet_extension_buildpackRange<1.1.1pivotal_cloud_foundry

newrelicnozzleRange<1.1.17pivotal_cloud_foundry

newrelicservice_brokerRange<1.12.64pivotal_cloud_foundry

pagerdutyservice_brokerRange<1.2.4pivotal_cloud_foundry

riverbedsteelcentral_appinternalsRange<10.21.1-bl516pivotal_cloud_foundry

sambavolume_serviceRange<1.1.1pivotal_cloud_foundry

signalsciencesservice_brokerRange<1.1.0pivotal_cloud_foundry

snykservice_brokerRange<1.0.3pivotal_cloud_foundry

solacepubsub\+Range<2.3.2pivotal_cloud_foundry

splunknozzleRange<1.1.1pivotal_cloud_foundry

sumologicnozzleRange<1.0.1pivotal_cloud_foundry

synopsysseeker_iast_service_brokerRange<1.2.14pivotal_cloud_foundry

tibcobusinessworks_buildpackRange<2.4.4containerpivotal_cloud_foundry

wavefrontwavefront_by_vmware_nozzleRange<1.0.2pivotal_cloud_foundry

yugabytedb_enterpriseRange<1.1.8pivotal_cloud_foundry

CPENameOperatorVersion
pivotal:cloud_foundry_command_line_interfacepivotal cloud foundry command line interfacelt6.45.0
pivotal:cloud_foundry_command_line_interface_releasepivotal cloud foundry command line interface releaselt1.16.0
pivotal:cloud_foundry_deploymentpivotal cloud foundry deploymentlt10.0.0
pivotal:cloud_foundry_deployment_concourse_taskspivotal cloud foundry deployment concourse taskslt9.3.0
pivotal:cloud_foundry_log_cache_releasepivotal cloud foundry log cache releaselt2.3.1
pivotal:cloud_foundry_networking_releasepivotal cloud foundry networking releaselt2.23.0
pivotal:cloud_foundry_notificationspivotal cloud foundry notificationslt58
pivotal:cloud_foundry_routing_releasepivotal cloud foundry routing releaselt0.189.0
pivotal:cloud_foundry_smoke_testpivotal cloud foundry smoke testlt40.0.113

CPE	Name	Operator	Version
pivotal:cloud_foundry_command_line_interface	pivotal cloud foundry command line interface	lt	6.45.0
pivotal:cloud_foundry_command_line_interface_release	pivotal cloud foundry command line interface release	lt	1.16.0
pivotal:cloud_foundry_deployment	pivotal cloud foundry deployment	lt	10.0.0
pivotal:cloud_foundry_deployment_concourse_tasks	pivotal cloud foundry deployment concourse tasks	lt	9.3.0
pivotal:cloud_foundry_log_cache_release	pivotal cloud foundry log cache release	lt	2.3.1
pivotal:cloud_foundry_networking_release	pivotal cloud foundry networking release	lt	2.23.0
pivotal:cloud_foundry_notifications	pivotal cloud foundry notifications	lt	58
pivotal:cloud_foundry_routing_release	pivotal cloud foundry routing release	lt	0.189.0
pivotal:cloud_foundry_smoke_test	pivotal cloud foundry smoke test	lt	40.0.113

CNA Affected

[
  {
    "product": "CF CLI Release",
    "vendor": "Cloud Foundry",
    "versions": [
      {
        "status": "affected",
        "version": "v1.x before v1.16.0"
      }
    ]
  },
  {
    "product": "CF CLI",
    "vendor": "Cloud Foundry",
    "versions": [
      {
        "status": "affected",
        "version": "versions prior to v6.45.0"
      }
    ]
  }
]

References

pivotal.io/security/cve-2019-3800

www.cloudfoundry.org/blog/cve-2019-3800

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.6%

JSON

Related for CVE-2019-3800

osv1 cvelist1 cloudfoundry1 ibm2 nvd1 prion1