high8.8
CVE-2019-3781
Cloud Foundry CLI, versions prior to v6.43.0, improperly exposes passwords when verbose/trace/debugging is turned on.
Impact
Cloud Foundry CLI, versions prior to v6.43.0, improperly exposes passwords when verbose/trace/debugging is turned on. A local unauthenticated or remote authenticated malicious user with access to logs may gain part or all of a users password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cloudfoundry | Command Line Interface | before 6.43.0 |