CVE-2019-3800

🗓️ 05 Aug 2019 17:15:10Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 12 Views

CF CLI vulnerability in writing client credential

Reporter	Title	Published	Views	Family All 9
IBM Security Bulletins	Security Bulletin: Vulnerability of Embedded CF CLI In IBM Cloud CLI	24 Jul 202021:16	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerability affects Cloud Foundry for IBM Cloud Private (CVE-2019-3800)	24 Nov 201913:04	–	ibm
Cloud Foundry	CVE-2019-3800: CF CLI writes the client id and secret to config file \| Cloud Foundry	18 Jul 201900:00	–	cloudfoundry
CVE	CVE-2019-3800	5 Aug 201916:38	–	cve
Cvelist	CVE-2019-3800 CF CLI writes the client id and secret to config file	5 Aug 201916:38	–	cvelist
EUVD	EUVD-2019-13427	7 Oct 202500:30	–	euvd
OSV	CVE-2019-3800	5 Aug 201917:15	–	osv
Prion	Design/Logic Flaw	5 Aug 201917:15	–	prion
SUSE CVE	SUSE CVE-2019-3800	15 Feb 202304:17	–	susecve

NVD

Node

pivotal cloud_foundry_command_line_interfaceRange<6.45.0

OR

pivotal cloud_foundry_command_line_interface_releaseRange<1.16.0

OR

pivotal cloud_foundry_deploymentRange<10.0.0

OR

pivotal cloud_foundry_deployment_concourse_tasksRange<9.3.0

OR

pivotal cloud_foundry_log_cache_releaseRange<2.3.1

OR

pivotal cloud_foundry_networking_releaseRange<2.23.0

OR

pivotal cloud_foundry_notificationsRange<58

OR

pivotal cloud_foundry_routing_releaseRange<0.189.0

OR

pivotal cloud_foundry_smoke_testRange<40.0.113

Node

pivotal application_serviceRange2.3.0–2.3.14

OR

pivotal application_serviceRange2.4.0–2.4.10

OR

pivotal application_serviceRange2.5.0–2.5.6

OR

pivotal cloud_foundry_autoscaling_releaseRange<219

OR

pivotal cloud_foundry_event_alertsRange<1.2.8

OR

pivotal cloud_foundry_healthwatchRange1.4.0–1.4.7

OR

pivotal cloud_foundry_healthwatchRange1.5.0–1.5.4

OR

pivotal credhub_service_broker_for_pcfRange<1.3.2

OR

pivotal metric_registrar_releaseRange<1.2

OR

pivotal on_demand_service_brokerRange<0.29.0

OR

pivotal pivotal_cloud_foundry_service_brokerRange<1.4.13aws

OR

pivotal single_sign-onRange1.7.0–1.7.5cloud_foundry

OR

pivotal single_sign-onRange1.8.0–1.8.4cloud_foundry

OR

pivotal single_sign-onRange1.9.0–1.9.1cloud_foundry

Node

anynines elasticsearchRange<2.1.2pivotal_cloud_foundry

OR

anynines logmeRange<2.1.2pivotal_cloud_foundry

OR

anynines mongodbRange<2.1.2pivotal_cloud_foundry

OR

anynines mysqlRange<2.1.2pivotal_cloud_foundry

OR

anynines postgresqlRange<2.1.2pivotal_cloud_foundry

OR

anynines rabbitmqRange<2.1.2pivotal_cloud_foundry

OR

anynines redisRange<2.1.2pivotal_cloud_foundry

OR

apigee edge_service_brokerRange<3.1.3pivotal_cloud_foundry

OR

appdynamics application_analyticsRange<4.7.652pivotal_cloud_foundry

OR

appdynamics application_performance_monitoringRange<4.6.64pivotal_cloud_foundry

OR

appdynamics platform_montioringRange<4.7.712pivotal_cloud_foundry

OR

bluemedora nozzleRange<3.1.1pivotal_cloud_foundry

OR

contrastsecurity service_brokerRange<2.2.0pivotal_cloud_foundry

OR

cyberark conjur_service_brokerRange<1.1.1pivotal_cloud_foundry

OR

datadoghq application_monitoringRange<1.7.0pivotal_cloud_foundry

OR

datastax enterprise_service_brokerRange<1.0.2pivotal_cloud_foundry

OR

dynatrace service_brokerRange<1.4.2pivotal_cloud_foundry

OR

forgerock service_brokerRange<2.1.2pivotal_cloud_foundry

OR

google google_cloud_platform_service_brokerRange<4.2.3pivotal_cloud_foundry

OR

ibm websphere_liberty_Range<3.11.0pivotal_cloud_foundry

OR

microsoft azure_log_analytics_nozzleRange<1.4.1pivotal_cloud_foundry

OR

microsoft azure_service_brokerRange<1.4.1pivotal_cloud_foundry

OR

newrelic dotnet_extension_buildpackRange<1.1.1pivotal_cloud_foundry

OR

newrelic nozzleRange<1.1.17pivotal_cloud_foundry

OR

newrelic service_brokerRange<1.12.64pivotal_cloud_foundry

OR

pagerduty service_brokerRange<1.2.4pivotal_cloud_foundry

OR

riverbed steelcentral_appinternalsRange<10.21.1-bl516pivotal_cloud_foundry

OR

samba volume_serviceRange<1.1.1pivotal_cloud_foundry

OR

signalsciences service_brokerRange<1.1.0pivotal_cloud_foundry

OR

snyk service_brokerRange<1.0.3pivotal_cloud_foundry

OR

solace pubsub+Range<2.3.2pivotal_cloud_foundry

OR

splunk nozzleRange<1.1.1pivotal_cloud_foundry

OR

sumologic nozzleRange<1.0.1pivotal_cloud_foundry

OR

synopsys seeker_iast_service_brokerRange<1.2.14pivotal_cloud_foundry

OR

tibco businessworks_buildpackRange<2.4.4containerpivotal_cloud_foundry

OR

wavefront wavefront_by_vmware_nozzleRange<1.0.2pivotal_cloud_foundry

OR

yugabyte db_enterpriseRange<1.1.8pivotal_cloud_foundry

Source	Link
pivotal	www.pivotal.io/security/cve-2019-3800
cloudfoundry	www.cloudfoundry.org/blog/cve-2019-3800

21 Nov 2024 04:42Current

6.3Medium risk

Vulners AI Score6.3

CVSS 22.1

CVSS 36.3 - 7.8

EPSS0.00279

CWE-522 CWE-200

cf cli vulnerability client credentials config file malicious user client-owner