CyberSecBulletin

Cloud Controller API vulnerabilities

We track 1 vulnerability in Cloud Controller API products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 19, 2023.

1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score

Latest Cloud Controller API vulnerabilities

  • 8.1 High severity

    Cloud Controller API: Improper Certificate Validation

    CVE-2023-20881Cloud Controller API

    Cloud foundry instances having CAPI version between 1.140 and 1.152.0 along with loggregator-agent v7+ may override other users syslog drain credentials if they're aware of the client certificate used for that syslog drain. This applies even if the drain has z