Cloud Foundry Foundation bosh-windows-stemcell-builder güvenlik açıkları (CVE)

Cloud Foundry Foundation bosh-windows-stemcell-builder için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

2 sonuç

7.5Yüksek

CVE-2026-47831 4 ay önce

Cryptographically Weak Password Generation in bosh-windows-stemcell-builder Allows Remote SSH Brute-Force Attacks

Cloud Foundry Foundation bosh-windows-stemcell-builder

Use of a cryptographically weak random number generator in the GenerateRandomPassword function in bosh-windows-stemcell-builder allows a remote attacker to brute-force the resulting SSH login via TCP/22. Affected versions: bosh-windows-stemcell-builder versio…

8.8Yüksek

CVE-2026-47830 4 ay önce

Incorrect Permission Assignment Allows Local Privilege Escalation to SYSTEM via Executable Overwrite

Cloud Foundry Foundation bosh-windows-stemcell-builder

Incorrect Permission Assignment in BOSH.Utils.psm1 in BOSH-Ecosystem bosh-windows-stemcell-builder allows low-privilege authenticated users to overwrite C:\bosh\service_wrapper.exe or C:\bosh\bosh-agent.exe and gain NT AUTHORITY\SYSTEM on the next service res…