Pivotal Software Cloud Foundry Cf-Deployment vulnerabilities

2 CVEs affecting Pivotal Software Cloud Foundry Cf-Deployment, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-5399, published 2020-02-12.

More from Pivotal Software.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-1192, published 2018-02-01. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. In Cloud Foundry Foundation cf-release versions prior to v285; cf-deployment versions prior to v1.7; UAA 4.5.x versions prior to 4.5.5, 4.8.x versions prior to 4.8.3, and 4.7.x versions prior to…
• CVE-2020-5399, published 2020-02-12. High severity, CVSS 7.4. EPSS: 0.5% chance of exploitation in the next 30 days. Cloud Foundry CredHub, versions prior to 2.5.10, connects to a MySQL database without TLS even when configured to use TLS. A malicious user with access to the network between CredHub and its MySQL…