3.0Low
CVE-2025-22246CVE-2025-22246 – UAA Private Key Exposure
Description
Cloud Foundry UAA release versions from v77.21.0 to v7.31.0 are vulnerable to a private key exposure in logs.
Weakness (CWE):
CWE-532
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| Cloud Foundry | CF deployment | — | |
| Cloud Foundry | UAA | — | |
| cloudfoundry | cf-deployment | 45.1.0 – < 49.0.0 | |
| cloudfoundry | uaa release | 77.21.0 – < 77.32.0 |
References and patches
- https://www.cloudfoundry.org/blog/cve-2025-22246-uaa-private-key-exposure/ MitigationVendor Advisory
CPE matches (NVD) (2)
cpe:2.3:a:cloudfoundry:cf-deployment:*:*:*:*:*:*:*:*≥ 45.1.0 < 49.0.0cpe:2.3:a:cloudfoundry:uaa_release:*:*:*:*:*:*:*:*≥ 77.21.0 < 77.32.0