6.5Orta

CVE-2026-59386Credential exposure to space supporter

Cloud Foundry Cloud Foundry Controller (CAPI); Cloud Foundry cf-deployment Yayım: (13 gün önce)

Açıklama

A SpaceSupporter could improperly modify an application's start command and buildpack—actions requiring SpaceDeveloper privileges. This privilege escalation enables unauthorized retrieval of service credentials through malicious start commands or custom buildpacks.

Zayıflık türü (CWE): CWE-269

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
Cloud Foundry cf-deployment < v60.9.0
Cloud Foundry Cloud Foundry Controller (CAPI) ≤ 1.247.0

Kaynaklar ve yamalar