Cloudfoundry Stratos vulnerabilities

2 CVEs affecting Cloudfoundry Stratos, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-3784, published 2019-03-07.

More from Cloudfoundry.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-3784, published 2019-03-07. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. Cloud Foundry Stratos, versions prior to 2.3.0, contains an insecure session that can be spoofed. When deployed on cloud foundry with multiple instances using the default embedded SQLite database, a…
• CVE-2019-3783, published 2019-03-07. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. Cloud Foundry Stratos, versions prior to 2.3.0, deploys with a public default session store secret. A malicious user with default session store secret can brute force another user's current Stratos…