Cloud Foundry Foundation bosh-windows-stemcell-builder Schwachstellen (CVE)

Für Cloud Foundry Foundation bosh-windows-stemcell-builder veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

2 Ergebnisse

7.5Hoch

CVE-2026-47831 vor 4 Monaten

Cryptographically Weak Password Generation in bosh-windows-stemcell-builder Allows Remote SSH Brute-Force Attacks

Cloud Foundry Foundation bosh-windows-stemcell-builder

Use of a cryptographically weak random number generator in the GenerateRandomPassword function in bosh-windows-stemcell-builder allows a remote attacker to brute-force the resulting SSH login via TCP/22. Affected versions: bosh-windows-stemcell-builder versio…

8.8Hoch

CVE-2026-47830 vor 4 Monaten

Incorrect Permission Assignment Allows Local Privilege Escalation to SYSTEM via Executable Overwrite

Cloud Foundry Foundation bosh-windows-stemcell-builder

Incorrect Permission Assignment in BOSH.Utils.psm1 in BOSH-Ecosystem bosh-windows-stemcell-builder allows low-privilege authenticated users to overwrite C:\bosh\service_wrapper.exe or C:\bosh\bosh-agent.exe and gain NT AUTHORITY\SYSTEM on the next service res…