bosh-vsphere-cpi-release vulnerabilities
1 known vulnerability in bosh-vsphere-cpi-release from Cloud Foundry. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.7average CVSS score
Latest first
- 7.7 High severity
bosh-vsphere-cpi-release: Improper Certificate Validation
Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vCenter to impersonate vCenter REST API and capture administrator credentials via HTTP Basic auth, leading to complete virtualization infrastr