Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
capi-release vulnerabilities and exploits
(subscribe to this query)
5.3
CVSSv3
CVE-2016-2169
Cloud Foundry Cloud Controller, capi-release versions before 1.0.0 and cf-release versions prior to v237, contain a business logic flaw. An application developer may create an application with a route that conflicts with a platform service route and receive traffic intended for t...
Cloudfoundry Capi-release
Cloudfoundry Cf-release
8.1
CVSSv3
CVE-2018-1266
Cloud Foundry Cloud Controller, versions before 1.52.0, contains information disclosure and path traversal vulnerabilities. An authenticated malicious user can predict the location of application blobs and leverage path traversal to create a malicious application that has the abi...
Cloudfoundry Capi-release
8.8
CVSSv3
CVE-2018-1195
In Cloud Controller versions before 1.46.0, cf-deployment versions before 1.3.0, and cf-release versions before 283, Cloud Controller accepts refresh tokens for authentication where access tokens are expected. This exposes a vulnerability where a refresh token that would otherwis...
Cloudfoundry Cf-release
Cloudfoundry Cf-deployment
Cloudfoundry Capi-release
6.5
CVSSv3
CVE-2017-14389
An issue exists in Cloud Foundry Foundation capi-release (all versions before 1.45.0), cf-release (all versions prior to v280), and cf-deployment (all versions prior to v1.0.0). The Cloud Controller does not prevent space developers from creating subdomains to an already existing...
Cloudfoundry Capi-release
Cloudfoundry Cf-deployment
Cloudfoundry Cf-release
7.8
CVSSv3
CVE-2017-8048
In Cloud Foundry capi-release versions 1.33.0 and later, before 1.42.0 and cf-release versions 268 and later, before 274, the original fix for CVE-2017-8033 introduces an API regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushing ...
Pivotal Capi-release 1.34.0
Pivotal Capi-release 1.33.0
Cloudfoundry Cf-release 269
Cloudfoundry Cf-release 268
Pivotal Capi-release 1.41.0
Pivotal Capi-release 1.40.0
Pivotal Capi-release 1.39.0
Cloudfoundry Cf-release 272
Cloudfoundry Cf-release 270
Pivotal Capi-release 1.37.0
Pivotal Capi-release 1.35.0
Cloudfoundry Cf-release 273
Cloudfoundry Cf-release 271
Pivotal Capi-release 1.38.0
Pivotal Capi-release 1.36.0
7.5
CVSSv3
CVE-2017-8037
In Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.38.0 and cf-release versions after v244 and prior to v270, there is an incomplete fix for CVE-2017-8035. If you took steps to remediate CVE-2017-8035 you should also upgrade to fix this CVE. A carefull...
Cloudfoundry Capi-release 1.9.0
Cloudfoundry Capi-release 1.10.0
Cloudfoundry Capi-release 1.17.0
Cloudfoundry Capi-release 1.18.0
Cloudfoundry Capi-release 1.19.0
Cloudfoundry Capi-release 1.26.0
Cloudfoundry Capi-release 1.27.0
Cloudfoundry Capi-release 1.34.0
Cloudfoundry Capi-release 1.35.0
Cloudfoundry Capi-release 1.13.0
Cloudfoundry Capi-release 1.14.0
Cloudfoundry Capi-release 1.22.0
Cloudfoundry Capi-release 1.23.0
Cloudfoundry Capi-release 1.30.0
Cloudfoundry Capi-release 1.31.0
Cloudfoundry Capi-release 1.7.0
Cloudfoundry Capi-release 1.8.0
Cloudfoundry Capi-release 1.15.0
Cloudfoundry Capi-release 1.16.0
Cloudfoundry Capi-release 1.24.0
Cloudfoundry Capi-release 1.25.0
Cloudfoundry Capi-release 1.32.0
7.8
CVSSv3
CVE-2017-8033
An issue exists in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions prior to v1.35.0 and cf-release versions prior to v268. A filesystem traversal vulnerability exists in the Cloud Controller that allows a space developer to escalate privileges by pushin...
Cloudfoundry Capi-release
Cloudfoundry Cf-release
7.5
CVSSv3
CVE-2017-8035
An issue exists in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.35.0 and cf-release versions after v244 and prior to v268. A carefully crafted CAPI request from a Space Developer can allow them to gain access to files on ...
Cloudfoundry Capi-release
Cloudfoundry Cf-release
7.8
CVSSv3
CVE-2017-8036
An issue exists in the Cloud Controller API in Cloud Foundry Foundation CAPI-release version 1.33.0 (only). The original fix for CVE-2017-8033 included in CAPI-release 1.33.0 introduces a regression that allows a space developer to execute arbitrary code on the Cloud Controller V...
Cloudfoundry Capi-release 1.33.0
6.6
CVSSv3
CVE-2017-8034
The Cloud Controller and Router in Cloud Foundry (CAPI-release capi versions prior to v1.32.0, Routing-release versions prior to v0.159.0, CF-release versions prior to v267) do not validate the issuer on JSON Web Tokens (JWTs) from UAA. With certain multi-zone UAA configurations,...
Cloudfoundry Capi-release
Cloudfoundry Cf-release
Cloudfoundry Routing-release
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322
administrator privileges
CVE-2024-1579
hardcoded
CVE-2023-20198
CVE-2024-33587
CVE-2024-33449
CVE-2024-4308
HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
NEXT »