CVE-2019-3783: Cloudfoundry Stratos

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Cloud Foundry Stratos, versions prior to 2.3.0, deploys with a public default session store secret. A malicious user with default session store secret can brute force another user's current Stratos session, and act on behalf of that user.

Affected products

• Cloudfoundry Stratos: before 2.3.0 (fixed in 2.3.0)

Published 2019-03-07. Last modified 2026-06-17.