CVE-2019-3779

CVE-2019-3779 affects Cloud Foundry Container Runtime (CFCR) prior to v0.29.0. The vulnerability arises because CFCR clusters use the same Certificate Authority to sign and trust certificates for ETCD as for the Kubernetes API. An authenticated user within a cluster could exploit the Kubernetes C...

CVE-2019-3780

CVE-2019-3780 affects Cloud Foundry Container Runtime (CFCR) prior to v0.28.0. The vulnerability arises because worker nodes deployed by CFCR contain a configuration file with IAAS credentials, enabling a user with node access to obtain those credentials and escalate privileges within the IAAS ac...