Cloud Foundry Bits Service Information Disclosure Vulnerability

Cloud Foundry Bits Service is a program from the Cloud Foundry Foundation that encapsulates "bit manipulation" into a separately scalable service. An information disclosure vulnerability exists in Cloud Foundry Bits Service versions prior to 2.18.0, which can be exploited by a remote attacker to...

PT-2018-13215

Name of the Vulnerable Software and Affected Versions Cloud Foundry Bits Service versions prior to 2.18.0 Description The issue allows a remote malicious user to execute a timing attack, potentially brute-forcing the signing key. This could grant the attacker complete read and write access to the...

CVE-2018-15800: Exposure of Sensitive Information to an Unauthorized Actor

Cloud Foundry Bits Service, versions prior to 2.18.0, includes an information disclosure vulnerability. A remote malicious user may execute a timing attack to brute-force the signing key, allowing them complete read and write access to the the Bits Service storage...

CVE-2018-15796: Inadequate Encryption Strength

Cloud Foundry Bits Service Release, versions prior to 2.14.0, uses an insecure hashing algorithm to sign URLs. A remote malicious user may obtain a signed URL and extract the signing key, allowing them complete read and write access to the the Bits Service storage...

PT-2018-13212

Name of the Vulnerable Software and Affected Versions Cloud Foundry Bits Service versions prior to 2.14.0 Description The issue concerns the use of an insecure hashing algorithm to sign URLs, which could allow a remote malicious user to obtain a signed URL, extract the signing key, and gain...