PT-2019-12234

Name of the Vulnerable Software and Affected Versions Cloud Foundry Cloud Controller API CAPI version 1.88.0 Description The issue allows space developers to list all global service brokers, including service broker URLs and GUIDs, which should only be accessible to admins. Recommendations For...

CVE-2019-11294: Exposure of Sensitive Information to an Unauthorized Actor

Cloud Foundry Cloud Controller API CAPI, version 1.88.0, allows space developers to list all global service brokers, including service broker URLs and GUIDs, which should only be accessible to admins...

PT-2019-16727

Name of the Vulnerable Software and Affected Versions Cloud Foundry Cloud Controller API Release versions prior to 1.79.0 Description The issue concerns improper authentication in the validation of user permissions. A remote authenticated malicious user, with the ability to create UAA clients and...

CVE-2019-3798: Improper Authentication

Cloud Foundry Cloud Controller API Release, versions prior to 1.79.0, contains improper authentication when validating user permissions. A remote authenticated malicious user with the ability to create UAA clients and knowledge of the email of a victim in the foundation may escalate their...