3.0Düşük
CVE-2025-22246CVE-2025-22246 – UAA Private Key Exposure
Açıklama
Cloud Foundry UAA release versions from v77.21.0 to v7.31.0 are vulnerable to a private key exposure in logs.
Zayıflık türü (CWE):
CWE-532
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| Cloud Foundry | CF deployment | — | |
| Cloud Foundry | UAA | — | |
| cloudfoundry | cf-deployment | 45.1.0 – < 49.0.0 | |
| cloudfoundry | uaa release | 77.21.0 – < 77.32.0 |
Kaynaklar ve yamalar
- https://www.cloudfoundry.org/blog/cve-2025-22246-uaa-private-key-exposure/ MitigationVendor Advisory
CPE eşleşmeleri (NVD) (2)
cpe:2.3:a:cloudfoundry:cf-deployment:*:*:*:*:*:*:*:*≥ 45.1.0 < 49.0.0cpe:2.3:a:cloudfoundry:uaa_release:*:*:*:*:*:*:*:*≥ 77.21.0 < 77.32.0