555 matches found
CVE-2026-47832
The vulnerability lies in the way application credentials are handled within the BOSH deployment. bosh-openstack-cpi-release: all versions from v55 to v55.0.4 inclusive...
CVE-2026-47832
The bosh-openstack-cpi-release component (versions v55 to v55.0.4 inclusive) is vulnerable to an information leak due to improper handling of application credentials. The application_credential_secret used to authenticate with OpenStack is inadvertently written in cleartext within the BOSH task d...
CVE-2026-47832 OpenStack Application Credentials Logged in Cleartext to BOSH Debug Logs
The vulnerability lies in the way application credentials are handled within the BOSH deployment. bosh-openstack-cpi-release: all versions from v55 to v55.0.4 inclusive...
CVE-2026-47832
The vulnerability lies in the way application credentials are handled within the BOSH deployment. bosh-openstack-cpi-release: all versions from v55 to v55.0.4 inclusive...
EUVD-2026-124329
The vulnerability lies in the way application credentials are handled within the BOSH deployment. bosh-openstack-cpi-release: all versions from v55 to v55.0.4 inclusive...
CVE-2026-47832
The vulnerability lies in the way application credentials are handled within the BOSH deployment. bosh-openstack-cpi-release: all versions from v55 to v55.0.4 inclusive...
CVE-2026-47832: CloudFoundry Foundation bosh-openstack-cpi-release: The vulnerability lies in the way application credentials are handled within the BOSH deployment
The vulnerability lies in the way application credentials are handled within the BOSH deployment. bosh-openstack-cpi-release: all versions from v55 to v55.0.4 inclusive...
PT-2026-145731
The vulnerability lies in the way application credentials are handled within the BOSH deployment. bosh-openstack-cpi-release: all versions from v55 to v55.0.4 inclusive...
UBUNTU-CVE-2026-47832
The vulnerability lies in the way application credentials are handled within the BOSH deployment. bosh-openstack-cpi-release: all versions from v55 to v55.0.4 inclusive...
CVE-2026-47832 - OpenStack Application Credentials Logged in Cleartext to BOSH Debug Logs | Cloud Foundry
Severity High CVSS Score 7.3 High CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H Vendor CloudFoundry Foundation Versions Affected bosh-openstack-cpi-release All versions from v55 to v55.0.4 inclusive Description The vulnerability lies in the way application credentials are handle...
ejabberd -- Multiple security vulnerabilities
ejabberd team reports: Unauthenticated Remote Code Execution on ejabberd reported by Gia Bui when: ejabberd versions is at least 25.10 BOSH is enabled on any port S2S is enabled modadhocapi is loaded outbound connectivity from ejabberd on ports epmd default 4369, s2s default 5269 and Erlang...
CVE-2026-41012 BOSH vSphere CPI Improper Cert Validation
Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vCenter to impersonate vCenter REST API and capture administrator credentials via HTTP Basic auth, leading to complete virtualization infrastructure takeover. An attacker who can...
CVE-2026-41012
Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vCenter to impersonate vCenter REST API and capture administrator credentials via HTTP Basic auth, leading to complete virtualization infrastructure takeover. An attacker who can...
CVE-2026-41012
CVE-2026-41012 is a traffic interception vulnerability in BOSH Director vSphere CPI (all versions prior to v98.0.6 ) caused by insufficient certificate validation and pinning in the communication between BOSH Director and vCenter. An attacker positioned between the two can impersonate the vCenter...
EUVD-2026-68038
Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vCenter to impersonate vCenter REST API and capture administrator credentials via HTTP Basic auth, leading to complete virtualization infrastructure takeover. An attacker who can...
CVE-2026-41012 BOSH vSphere CPI Improper Cert Validation
Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vCenter to impersonate vCenter REST API and capture administrator credentials via HTTP Basic auth, leading to complete virtualization infrastructure takeover. An attacker who can...
PT-2026-83390
Name of the Vulnerable Software and Affected Versions BOSH vSphere CPI versions prior to 98.0.6 Description An issue in the communication protocol between BOSH Director and vCenter allows an attacker positioned between these two entities to intercept traffic and impersonate the vCenter REST API...
CVE-2026-41012: Improper Certificate Validation
Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vCenter to impersonate vCenter REST API and capture administrator credentials via HTTP Basic auth, leading to complete virtualization infrastructure takeover. An attacker who can...
CVE-2026-41012- BOSH VSphere CPI Improper Cert Validation | Cloud Foundry
Severity HIGH CVSSv4: High 8.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CVSSv3: High 7.7 CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H Vendor Cloud Foundry Foundation Versions Affected Severity is HIGH unless otherwise noted. BOSH VSphere CPI All versions prior to v98.0.6...