Advisories · Technology
Cloud Foundry cf-deployment.
Every CVE that names Cloud Foundry cf-deployment among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Broken access control restriction in Cloud Controller API
- Cloud Foundry CAPI (Cloud Controller API)
- Cloud Foundry cf-deployment
- Broken access control
- CVSS 2.7 Low
Space Developer can extract space-scoped broker credentials
- CAPI (Cloud Foundry Controller)
- Cloud Foundry CF Deployment
- Broken access control
- CVSS 6.5 Medium
Credential exposure to space supporter
- Cloud Foundry Controller (CAPI)
- Cloud Foundry cf-deployment
- Privilege escalation
- CVSS 6.9 Medium
DoS Vulnerability in UAA Related to JWKS URI Handling
- Cloud Foundry UAA
- Cloud Foundry cf-deployment
- Denial of service
- CVSS 6.5 Medium
Self-UAA OIDC Configuration allows JWT injection to establish unauthorized sessions
- Cloud Foundry UAA
- Cloud Foundry cf-deployment
- CWE-345
- CVSS 7.6 High
UAA OAuth Token Endpoint Vulnerability allows user access token reuse for client_credentials grant type
- Cloud Foundry UAA
- Cloud Foundry cf-deployment
- Authentication bypass
- CVSS 8.7 High
Case-Sensitive Authorization Check Bypass via Identity Zone ID Case Manipulation Leads to Full UAA Compromise
- Cloud Foundry UAA
- Cloud Foundry cf-deployment
- CWE-178
- CVSS 9.0 CriticalCritical · CVSS 9+
UAA accepts SAML Encrypted Assertions authentication bypass
- Cloud Foundry UAA
- Cloud Foundry CF Deployment
- Weak cryptography or TLS
- CVSS 3.0 Low
CVE-2025-22246 – UAA Private Key Exposure
- Cloud Foundry UAA
- Cloud Foundry CF deployment
- Information disclosure
- CVSS 7.5 High
CVE-2023-34061 – Gorouter route pruning
- Cloud Foundry Routing Release
- Cloud Foundry CF deployment
- Denial of service
- CVSS 5.3 Medium
CVE-2023-34041-Abuse of HTTP Hop-by-Hop Headers in Cloud Foundry Gorouter
- Cloud Foundry Routing
- Cloud Foundry CF Deployment
- CVSS 7.5 High
Cloud Controller is vulnerable to denial of service via YAML parsing
- Cloud Foundry CAPI
- Cloud Foundry CF Deployment
- Denial of service
- CVSS 7.7 High
Gorouter is vulnerable to DoS attack via invalid HTTP responses
- Cloud Foundry Routing
- Cloud Foundry CF Deployment
- CWE-754
- CVSS 3.1 Low
Cloud Controller allows users with no roles to list droplets
- Cloud Foundry CAPI
- Cloud Foundry CF Deployment
- Broken access control
- CVSS 8.5 High
Cloud Controller may allow developers to claim sensitive routes
- Cloud Foundry CAPI
- Cloud Foundry CF Deployment
- Broken access control
- CVSS 7.7 High
CF clusters with NGINX in front of them may be vulnerable to DoS
- Cloud Foundry Routing
- Cloud Foundry CF Deployment
- Denial of service
- CVSS 8.8 High
Password leak in smbdriver logs
- Cloud Foundry SMB Volume
- Cloud Foundry CF Deployment
- Information disclosure
- CVSS 4.3 Medium
UAA is vulnerable to a Blind SCIM injection leading to information disclosure
- Cloud Foundry UAA Release
- Cloud Foundry CF Deployment
- Information disclosure
- CVSS 8.4 High
Volume Services is vulnerable to an LDAP injection attack
- Cloud Foundry CF NFS volume release
- Cloud Foundry CF Deployment
- Other injection
- CVSS 8.7 High
Java Projects using HTTP to fetch dependencies
- Cloud Foundry CredHub
- Cloud Foundry UAA Release (OSS)
- CWE-494