Cloudfoundry Container Runtime vulnerabilities

2 CVEs affecting Cloudfoundry Container Runtime, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-3780, published 2019-03-08.

More from Cloudfoundry.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-3780, published 2019-03-08. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. Cloud Foundry Container Runtime, versions prior to 0.28.0, deploys K8s worker nodes that contains a configuration file with IAAS credentials. A malicious user with access to the k8s nodes can obtain…
• CVE-2019-3779, published 2019-03-08. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Cloud Foundry Container Runtime, versions prior to 0.29.0, deploys Kubernetes clusters utilize the same CA (Certificate Authority) to sign and trust certs for ETCD as used by the Kubernetes API. This…