3.0Baja
CVE-2025-22246CVE-2025-22246 – UAA Private Key Exposure
Descripción
Cloud Foundry UAA release versions from v77.21.0 to v7.31.0 are vulnerable to a private key exposure in logs.
Debilidad (CWE):
CWE-532
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| Cloud Foundry | CF deployment | — | |
| Cloud Foundry | UAA | — | |
| cloudfoundry | cf-deployment | 45.1.0 – < 49.0.0 | |
| cloudfoundry | uaa release | 77.21.0 – < 77.32.0 |
Referencias y parches
- https://www.cloudfoundry.org/blog/cve-2025-22246-uaa-private-key-exposure/ MitigationVendor Advisory
Coincidencias CPE (NVD) (2)
cpe:2.3:a:cloudfoundry:cf-deployment:*:*:*:*:*:*:*:*≥ 45.1.0 < 49.0.0cpe:2.3:a:cloudfoundry:uaa_release:*:*:*:*:*:*:*:*≥ 77.21.0 < 77.32.0