CVE-2019-3781

Description

Cloud Foundry CLI, versions prior to v6.43.0, improperly exposes passwords when verbose/trace/debugging is turned on. A local unauthenticated or remote authenticated malicious user with access to logs may gain part or all of a users password.

References

https://www.cloudfoundry.org/blog/cve-2019-3781

http://www.securityfocus.com/bid/107365

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3