Lucene search
GoogleOSV:CVE-2020-5418HistorySep 03, 2020 - 1:15 a.m.
CVE-2020-5418
2020-09-0301:15:00
Google
osv.dev
7
cloud foundry
capi
vulnerability
unauthorized
droplet listing
Cloud Foundry CAPI (Cloud Controller) versions prior to 1.98.0 allow authenticated users having only the “cloud_controller.read” scope, but no roles in any spaces, to list all droplets in all spaces (whereas they should see none).
References
Related
cloudfoundry
cloudfoundry
prion
prion
Code injection
2020-09-03 01:15:00
cvelist
cvelist
CVE-2020-5418 Cloud Controller allows users with no roles to list droplets
2020-09-03 01:10:15
nvd
nvd
CVE-2020-5418
2020-09-03 01:15:10
cve
cve
CVE-2020-5418
2020-09-03 01:15:10