Cloud Foundry Cloud Controller API (CAPI), version 1.88.0, allows space developers to list all global service brokers, including service broker URLs and GUIDs, which should only be accessible to admins.
References
Link | Resource |
---|---|
https://www.cloudfoundry.org/blog/cve-2019-11294 | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: pivotal
Published: 2019-12-19T00:00:00
Updated: 2019-12-19T19:35:11
Reserved: 2019-04-18T00:00:00
Link: CVE-2019-11294
JSON object: View
NVD Information
Status : Analyzed
Published: 2019-12-19T20:15:12.347
Modified: 2021-08-17T15:30:24.957
Link: CVE-2019-11294
JSON object: View
Redhat Information
No data.