Cloud Foundry Luki w zabezpieczeniach

Oś czasu

Rodzaj

Cloud Software39
Virtualization Software3
Backup Software1

Produkt

Cloud Foundry UAA5
Cloud Foundry CF Deployment4
Cloud Foundry Runtime4
Cloud Foundry CAPI3
Cloud Foundry Diego3

Przeciwdziałanie

Official Fix36
Temporary Fix0
Workaround1
Unavailable0
Not Defined6

Wykorzystywanie

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined43

Wektor dostępu

Not Defined0
Physical0
Local3
Adjacent9
Network31

Uwierzytelnianie

Not Defined0
High3
Low30
None10

Interakcja z użytkownikiem

Not Defined0
Required3
None40

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤44
≤55
≤68
≤710
≤812
≤93
≤101

CVSSv3 Temp

≤10
≤20
≤31
≤43
≤55
≤68
≤711
≤811
≤93
≤101

VulDB

≤10
≤20
≤30
≤47
≤516
≤66
≤710
≤81
≤92
≤101

NVD

≤10
≤20
≤30
≤41
≤52
≤61
≤75
≤86
≤914
≤106

CNA

≤10
≤20
≤30
≤40
≤51
≤62
≤74
≤82
≤96
≤102

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k11
<2k25
<5k7
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k43
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (29): BOSH (1), BOSH Azure CPI (1), BOSH Backup (1), BOSH System Metrics Server (1), CAPI (3), CF Deployment (4), CF Networking Release (1), Cloud Controller (3), Cloud Controller API (2), Container Runtime (3), CredHub CLI (1), Diego (3), Foundation UAA (1), Garden-runC (2), Log Cache (1), Loggregator (2), Loggregator-agent (1), NFS Volume Service (1), Notifications (1), Restore (1), Routing (2), Routing Release (1), Runtime (4), SMB-volume (1), SMB Volume (1), UAA (5), UAA Server (1), archiver (1), cf-nfs-volume (1)

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2024-01-127.57.3Cloud Foundry Routing Release/CF Deployment denial of serviceCloud SoftwareNot DefinedOfficial Fix0.000520.04CVE-2023-34061
2023-09-085.35.2Cloud Foundry Routing HTTP Hop-by-Hop Header nieznana lukaCloud SoftwareNot DefinedOfficial Fix0.000520.02CVE-2023-34041
2023-06-165.45.3Cloud Foundry Notifications/SMB-volume/cf-nfs-volume information disclosureCloud SoftwareNot DefinedOfficial Fix0.000490.00CVE-2023-20885
2023-05-264.74.6Cloud Foundry Routing/CF Deployment Client Disconnect denial of serviceCloud SoftwareNot DefinedOfficial Fix0.000460.00CVE-2023-20882
2023-05-196.36.3Cloud Foundry CAPI/Loggregator-agent/CF Deployment weak authenticationCloud SoftwareNot DefinedNot Defined0.000440.04CVE-2023-20881
2023-03-294.54.4Cloud Foundry UAA IDP Token weak authenticationCloud SoftwareNot DefinedWorkaround0.000530.03CVE-2023-20903
2023-02-035.65.4Cloud Foundry Diego/CF Deployment weak authenticationCloud SoftwareNot DefinedOfficial Fix0.000930.00CVE-2022-31733
2022-12-286.86.7Cloud Foundry archiver directory traversalCloud SoftwareNot DefinedOfficial Fix0.000890.03CVE-2018-25046
2022-03-263.53.4Cloud Foundry CAPI Service Broker denial of serviceCloud SoftwareNot DefinedOfficial Fix0.000790.00CVE-2021-22100
2021-10-285.95.8Cloud Foundry Cloud Controller REST HTTP Request denial of serviceCloud SoftwareNot DefinedOfficial Fix0.000950.00CVE-2021-22101

33 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 33 results.

◂ PoprzedniPrzeglądKolejny ▸

Might our Artificial Intelligence support you?

Check our Alexa App!