3.0Niedrig
CVE-2025-22246CVE-2025-22246 – UAA Private Key Exposure
Beschreibung
Cloud Foundry UAA release versions from v77.21.0 to v7.31.0 are vulnerable to a private key exposure in logs.
Schwachstellentyp (CWE):
CWE-532
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Cloud Foundry | CF deployment | — | |
| Cloud Foundry | UAA | — | |
| cloudfoundry | cf-deployment | 45.1.0 – < 49.0.0 | |
| cloudfoundry | uaa release | 77.21.0 – < 77.32.0 |
Referenzen und Patches
- https://www.cloudfoundry.org/blog/cve-2025-22246-uaa-private-key-exposure/ MitigationVendor Advisory
CPE-Treffer (NVD) (2)
cpe:2.3:a:cloudfoundry:cf-deployment:*:*:*:*:*:*:*:*≥ 45.1.0 < 49.0.0cpe:2.3:a:cloudfoundry:uaa_release:*:*:*:*:*:*:*:*≥ 77.21.0 < 77.32.0