CVE-2019-3781
CF CLI does not sanitize user's password in verbose/trace/debug
Cloud Foundry CLI, versions prior to v6.43.0, improperly exposes passwords when verbose/trace/debugging is turned on. A local unauthenticated or remote authenticated malicious user with access to logs may gain part or all of a users password.
CVSS 3.1 · 8.8 High
EPSS 1.3%
KEV · Not listed
Vendors
Products