Cloud Foundry Foundation CAPI (Cloud Foundry Controller) güvenlik açıkları (CVE)

Cloud Foundry Foundation CAPI (Cloud Foundry Controller) için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

2 sonuç
2.7Düşük
CVE-2026-59385

Space Developer can extract space-scoped broker credentials

Cloud Foundry CAPI (Cloud Foundry Controller); Cloud Foundry CF Deployment

A user with SpaceDeveloper privileges could modify the URL of a space-scoped broker without altering its credentials, enabling extraction of existing broker credentials by redirecting them to a broker under their control. The CF API does not permit direct rea…

6.5Orta
CVE-2026-59388

Cloud Controller exposes secrets in audit log

Cloud Foundry Foundation CAPI (Cloud Foundry Controller); Cloud Foundry Foundation cf-deployment

Cloud Controller (CAPI) leaks sensitive data into audit logs in multiple instances: custom buildpack credentials are exposed in audit events for app manifest application, creation, and updates; syslog drain URL credentials are exposed in user-provided service…