Cloud Foundry Foundation CAPI (Cloud Foundry Controller) Schwachstellen (CVE)

Für Cloud Foundry Foundation CAPI (Cloud Foundry Controller) veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

2 Ergebnisse
2.7Niedrig
CVE-2026-59385

Space Developer can extract space-scoped broker credentials

Cloud Foundry CAPI (Cloud Foundry Controller); Cloud Foundry CF Deployment

A user with SpaceDeveloper privileges could modify the URL of a space-scoped broker without altering its credentials, enabling extraction of existing broker credentials by redirecting them to a broker under their control. The CF API does not permit direct rea…

6.5Mittel
CVE-2026-59388

Cloud Controller exposes secrets in audit log

Cloud Foundry Foundation CAPI (Cloud Foundry Controller); Cloud Foundry Foundation cf-deployment

Cloud Controller (CAPI) leaks sensitive data into audit logs in multiple instances: custom buildpack credentials are exposed in audit events for app manifest application, creation, and updates; syslog drain URL credentials are exposed in user-provided service…