Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2019-3783

Cloud Foundry Stratos Deploys With Public Default Session Store Secret

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
dell

Description

Cloud Foundry Stratos, versions prior to 2.3.0, deploys with a public default session store secret. A malicious user with default session store secret can brute force another user's current Stratos session, and act on behalf of that user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cloud Foundry Stratos

  • All to < 2.3.0affected

References