Vulnerabilidades de Cloud Foundry Foundation CAPI (Cloud Foundry Controller) (CVE)

Registros CVE publicados para Cloud Foundry Foundation CAPI (Cloud Foundry Controller), los más recientes primero. Siga el producto para recibir un correo con cada nueva.

2 resultados
2.7Baja
CVE-2026-59385

Space Developer can extract space-scoped broker credentials

Cloud Foundry CAPI (Cloud Foundry Controller); Cloud Foundry CF Deployment

A user with SpaceDeveloper privileges could modify the URL of a space-scoped broker without altering its credentials, enabling extraction of existing broker credentials by redirecting them to a broker under their control. The CF API does not permit direct rea…

6.5Media
CVE-2026-59388

Cloud Controller exposes secrets in audit log

Cloud Foundry Foundation CAPI (Cloud Foundry Controller); Cloud Foundry Foundation cf-deployment

Cloud Controller (CAPI) leaks sensitive data into audit logs in multiple instances: custom buildpack credentials are exposed in audit events for app manifest application, creation, and updates; syslog drain URL credentials are exposed in user-provided service…