Cloud Foundry Vulnerabilità

Sequenza temporale

Genere

Cloud Software39
Virtualization Software3
Backup Software1

Prodotto

Cloud Foundry UAA5
Cloud Foundry CF Deployment4
Cloud Foundry Runtime4
Cloud Foundry CAPI3
Cloud Foundry Diego3

Contromisure

Official Fix36
Temporary Fix0
Workaround1
Unavailable0
Not Defined6

Sfruttabilità

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined43

Accesso al vettore

Not Defined0
Physical0
Local3
Adjacent9
Network31

Autenticazione

Not Defined0
High3
Low30
None10

Interazione dell'utente

Not Defined0
Required3
None40

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤44
≤55
≤68
≤710
≤812
≤93
≤101

CVSSv3 Temp

≤10
≤20
≤31
≤43
≤55
≤68
≤711
≤811
≤93
≤101

VulDB

≤10
≤20
≤30
≤47
≤516
≤66
≤710
≤81
≤92
≤101

NVD

≤10
≤20
≤30
≤41
≤52
≤61
≤75
≤86
≤914
≤106

CNA

≤10
≤20
≤30
≤40
≤51
≤62
≤74
≤82
≤96
≤102

Fornitore

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 giorni

<1k11
<2k25
<5k7
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k43
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Sfrutta il volume del mercato

🔴 CTI Attività

Affected Products (29): BOSH (1), BOSH Azure CPI (1), BOSH Backup (1), BOSH System Metrics Server (1), CAPI (3), CF Deployment (4), CF Networking Release (1), Cloud Controller (3), Cloud Controller API (2), Container Runtime (3), CredHub CLI (1), Diego (3), Foundation UAA (1), Garden-runC (2), Log Cache (1), Loggregator (2), Loggregator-agent (1), NFS Volume Service (1), Notifications (1), Restore (1), Routing (2), Routing Release (1), Runtime (4), SMB-volume (1), SMB Volume (1), UAA (5), UAA Server (1), archiver (1), cf-nfs-volume (1)

Data di pubblicazioneBaseTempVulnerabilitàProdSfrConEPSSCTICVE
12/01/20247.57.3Cloud Foundry Routing Release/CF Deployment denial of serviceCloud SoftwareNot DefinedOfficial Fix0.000520.04CVE-2023-34061
08/09/20235.35.2Cloud Foundry Routing HTTP Hop-by-Hop Header vulnerabilità sconosciutaCloud SoftwareNot DefinedOfficial Fix0.000520.02CVE-2023-34041
16/06/20235.45.3Cloud Foundry Notifications/SMB-volume/cf-nfs-volume rivelazione di un 'informazioneCloud SoftwareNot DefinedOfficial Fix0.000490.00CVE-2023-20885
26/05/20234.74.6Cloud Foundry Routing/CF Deployment Client Disconnect denial of serviceCloud SoftwareNot DefinedOfficial Fix0.000460.00CVE-2023-20882
19/05/20236.36.3Cloud Foundry CAPI/Loggregator-agent/CF Deployment autenticazione deboleCloud SoftwareNot DefinedNot Defined0.000440.05CVE-2023-20881
29/03/20234.54.4Cloud Foundry UAA IDP Token autenticazione deboleCloud SoftwareNot DefinedWorkaround0.000530.03CVE-2023-20903
03/02/20235.65.4Cloud Foundry Diego/CF Deployment autenticazione deboleCloud SoftwareNot DefinedOfficial Fix0.000930.00CVE-2022-31733
28/12/20226.86.7Cloud Foundry archiver directory traversalCloud SoftwareNot DefinedOfficial Fix0.000890.03CVE-2018-25046
26/03/20223.53.4Cloud Foundry CAPI Service Broker denial of serviceCloud SoftwareNot DefinedOfficial Fix0.000790.00CVE-2021-22100
28/10/20215.95.8Cloud Foundry Cloud Controller REST HTTP Request denial of serviceCloud SoftwareNot DefinedOfficial Fix0.000950.00CVE-2021-22101

33 non vengono visualizzate più voci

🔒 Login Required

You need to signup and login to see more of the remaining 33 results.

◂ PrecedenteVisione D'insiemeIl prossimo ▸

Interested in the pricing of exploits?

See the underground prices here!