CVE-2019-3784 Cloud Foundry Stratos contains a Session Collision Vulnerability
An authenticated attacker can hijack another user's session by exploiting session ID collisions in the default SQLite database configuration.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-3784?
CVE-2019-3784 is a high-severity authentication bypass vulnerability in Cloud Foundry Stratos, published on 7 Mar 2019. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Cloud Foundry Stratos, versions prior to 2.3.0, contains an insecure session that can be spoofed. When deployed on cloud foundry with multiple instances using the default embedded SQLite database, a remote authenticated malicious user can switch sessions to another user with the same session id.
Weakness: CWE-384
Which versions are affected by CVE-2019-3784?
It affects 1 product.
Products include Cloudfoundry Stratos.
How do I fix CVE-2019-3784?
No fix has been published for CVE-2019-3784 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2019-3784 being exploited?
There is no known exploitation of CVE-2019-3784 in the wild and no public exploit code.
Other vulnerabilities in Cloud Foundry Stratos
Sources
Also known as GHSA-7mqj-h5x5-v4fc.