Vulnerability · Published Sep 3, 2020 · Assigned by pivotal
CVE-2020-5418Cloud Controller allows users with no roles to list droplets
Low 3.1
In plain English
A low-severity incorrect authorization in CAPI from Cloud Foundry. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities).
Severity (CVSS 3.0)3.1Low
Exploit odds (30 days)0.6%top 52.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Cloud Foundry CAPI (Cloud Controller) versions prior to 1.98.0 allow authenticated users having only the "cloud_controller.read" scope, but no roles in any spaces, to list all droplets in all spaces (whereas they should see none).
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Cloud Foundry | CAPI | All – before 1.98.0 |
| Cloud Foundry | CF Deployment | All – before 13.17.0 |
Weakness: CWE-863 · Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
References
- https://www.cloudfoundry.org/blog/cve-2020-5418 x_refsource_CONFIRM