Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-20885

CF workflows leak credentials in system audit logs

Description

Vulnerability in Cloud Foundry Notifications, Cloud Foundry SMB-volume release, Cloud FOundry cf-nfs-volume release.This issue affects Notifications: All versions prior to 63; SMB-volume release: All versions prior to 3.1.19; cf-nfs-volume release: 5.0.X versions prior to 5.0.27, 7.1.X versions prior to 7.1.19.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cloud Foundry Notifications

Default version status: unaffected

  • All versions prior to 63affected

Cloud Foundry SMB-volume release

Default version status: unaffected

  • All versions prior to 3.1.19affected

Cloud FOundry cf-nfs-volume release

Default version status: unaffected

  • 5.0.x versions prior to 5.0.27affected
  • 7.1.x versions prior to 7.1.19affected

References