CVE-2019-3800 CF CLI writes the client id and secret to config file
Local attackers can read client credentials from the CF CLI config file to impersonate the client and access Cloud Foundry resources.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-3800?
CVE-2019-3800 is a medium-severity vulnerability in Cloud Foundry CF CLI, published on 5 Aug 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. A local authenticated malicious user with access to the CF CLI config file can act as that client, who is the owner of the leaked credentials.
Which versions are affected by CVE-2019-3800?
It affects 55 products.
Products include Anynines Elasticsearch, Anynines Logme, Anynines Mongodb, Anynines Mysql, Anynines Postgresql, Anynines Rabbitmq and 49 more.
How do I fix CVE-2019-3800?
No fix has been published for CVE-2019-3800 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-3800 being exploited?
There is no known exploitation of CVE-2019-3800 in the wild and no public exploit code.
Sources
Also known as GHSA-2wpx-p7qg-954w.