Vulnerabilities (CVE)

Filtered by CWE-215
Total 23 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-3781 1 Cloudfoundry 1 Command Line Interface 2026-06-17 3.5 LOW 8.8 HIGH
Cloud Foundry CLI, versions prior to v6.43.0, improperly exposes passwords when verbose/trace/debugging is turned on. A local unauthenticated or remote authenticated malicious user with access to logs may gain part or all of a users password.
CVE-2018-1191 1 Cloudfoundry 2 Cf-deployment, Garden-runc-release 2026-06-17 3.5 LOW 8.8 HIGH
Cloud Foundry Garden-runC, versions prior to 1.11.0, contains an information exposure vulnerability. A user with access to Garden logs may be able to obtain leaked credentials and perform authenticated actions using those credentials.
CVE-2018-1002104 1 Kubernetes 1 Nginx Ingress Controller 2026-06-17 5.0 MEDIUM 5.3 MEDIUM
Versions < 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus metrics publicly.