Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-3800

CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. A local authenticated malicious user with access to the CF CLI config file can act as that client, who is the owner of the leaked credentials.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.8%
CVSS Severity
CVSS v3 Score 6.3
CVSS v2 Score 2.1
Products affected by CVE-2019-3800


Contact Us

Shodan ® - All rights reserved