Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2019-3781

CF CLI does not sanitize user's password in verbose/trace/debug

Description

Cloud Foundry CLI, versions prior to v6.43.0, improperly exposes passwords when verbose/trace/debugging is turned on. A local unauthenticated or remote authenticated malicious user with access to logs may gain part or all of a users password.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cloud Foundry CF CLI

  • All to < v6.43.0affected

References