CVE-2016-9882: Cloudfoundry Capi-Release

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v250 and CAPI-release versions prior to v1.12.0. Cloud Foundry logs the credentials returned from service brokers in Cloud Controller system component logs. These logs are written to disk and often sent to a log aggregator via syslog.

Affected products

• Cloudfoundry Capi-Release: up to and including 1.11.0
• Cloudfoundry Cf-Release: up to and including 249

Published 2017-01-13. Last modified 2026-06-17.