Cloud Foundry 漏洞

时间轴

类型

Cloud Software39
Virtualization Software3
Backup Software1

产品

Cloud Foundry UAA5
Cloud Foundry CF Deployment4
Cloud Foundry Runtime4
Cloud Foundry CAPI3
Cloud Foundry Diego3

修正

Official Fix36
Temporary Fix0
Workaround1
Unavailable0
Not Defined6

易受攻击性

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined43

访问向量

Not Defined0
Physical0
Local3
Adjacent9
Network31

身份验证

Not Defined0
High3
Low30
None10

用户交互

Not Defined0
Required3
None40

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤44
≤55
≤68
≤710
≤812
≤93
≤101

CVSSv3 Temp

≤10
≤20
≤31
≤43
≤55
≤68
≤711
≤811
≤93
≤101

VulDB

≤10
≤20
≤30
≤47
≤516
≤66
≤710
≤81
≤92
≤101

NVD

≤10
≤20
≤30
≤41
≤52
≤61
≤75
≤86
≤914
≤106

CNA

≤10
≤20
≤30
≤40
≤51
≤62
≤74
≤82
≤96
≤102

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k11
<2k25
<5k7
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k43
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (29): BOSH (1), BOSH Azure CPI (1), BOSH Backup (1), BOSH System Metrics Server (1), CAPI (3), CF Deployment (4), CF Networking Release (1), Cloud Controller (3), Cloud Controller API (2), Container Runtime (3), CredHub CLI (1), Diego (3), Foundation UAA (1), Garden-runC (2), Log Cache (1), Loggregator (2), Loggregator-agent (1), NFS Volume Service (1), Notifications (1), Restore (1), Routing (2), Routing Release (1), Runtime (4), SMB-volume (1), SMB Volume (1), UAA (5), UAA Server (1), archiver (1), cf-nfs-volume (1)

已发布BaseTemp漏洞Prod易修正EPSSCTICVE
2024-01-127.57.3Cloud Foundry Routing Release/CF Deployment 拒绝服务Cloud SoftwareNot DefinedOfficial Fix0.000520.04CVE-2023-34061
2023-09-085.35.2Cloud Foundry Routing HTTP Hop-by-Hop Header 未知漏洞Cloud SoftwareNot DefinedOfficial Fix0.000520.02CVE-2023-34041
2023-06-165.45.3Cloud Foundry Notifications/SMB-volume/cf-nfs-volume 信息公开Cloud SoftwareNot DefinedOfficial Fix0.000490.00CVE-2023-20885
2023-05-264.74.6Cloud Foundry Routing/CF Deployment Client Disconnect 拒绝服务Cloud SoftwareNot DefinedOfficial Fix0.000460.00CVE-2023-20882
2023-05-196.36.3Cloud Foundry CAPI/Loggregator-agent/CF Deployment 弱身份验证Cloud SoftwareNot DefinedNot Defined0.000440.04CVE-2023-20881
2023-03-294.54.4Cloud Foundry UAA IDP Token 弱身份验证Cloud SoftwareNot DefinedWorkaround0.000530.03CVE-2023-20903
2023-02-035.65.4Cloud Foundry Diego/CF Deployment 弱身份验证Cloud SoftwareNot DefinedOfficial Fix0.000930.00CVE-2022-31733
2022-12-286.86.7Cloud Foundry archiver 目录遍历Cloud SoftwareNot DefinedOfficial Fix0.000890.03CVE-2018-25046
2022-03-263.53.4Cloud Foundry CAPI Service Broker 拒绝服务Cloud SoftwareNot DefinedOfficial Fix0.000790.00CVE-2021-22100
2021-10-285.95.8Cloud Foundry Cloud Controller REST HTTP Request 拒绝服务Cloud SoftwareNot DefinedOfficial Fix0.000950.00CVE-2021-22101

33 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 33 results.

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!