CVE-2019-3780 Cloud Foundry Container Runtime Leaks IAAS Credentials
Attackers with node access can read configuration files to steal IaaS credentials, enabling privilege escalation to the infrastructure account.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-3780?
CVE-2019-3780 is a critical vulnerability in Cloud Foundry Container Runtime (CFCR), published on 8 Mar 2019. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Cloud Foundry Container Runtime, versions prior to 0.28.0, deploys K8s worker nodes that contains a configuration file with IAAS credentials. A malicious user with access to the k8s nodes can obtain IAAS credentials allowing the user to escalate privileges to gain access to the IAAS account.
Which versions are affected by CVE-2019-3780?
It affects 1 product.
Products include Cloudfoundry Container Runtime.
How do I fix CVE-2019-3780?
No fix has been published for CVE-2019-3780 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-3780 being exploited?
There is no known exploitation of CVE-2019-3780 in the wild and no public exploit code.
Other vulnerabilities in Cloud Foundry Container Runtime (CFCR)
Sources
Also known as GHSA-w2x8-37g8-j83c.