Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2021-22115

Cloud Controller API versions prior to 1.106.0 logs service broker credentials if the default value of db logging config field is changed. CAPI database logs service broker password in plain text whenever a job to clean up orphaned items is run by Cloud Controller.

  • Published: Apr 8, 2021
  • Updated: Apr 14, 2023
  • CVE: CVE-2021-22115
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

  • Severity: Low
  • Score: 4
  • AV:N/AC:L/Au:S/C:P/I:N/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
cloudfoundry / capi-release - 1.106.0
cloudfoundry / cf-deployment - 16.2.0