← CVE Intelligence

CVE-2019-3781

CF CLI does not sanitize user's password in verbose/trace/debug PUBLISHED

Description (CNA)

Cloud Foundry CLI, versions prior to v6.43.0, improperly exposes passwords when verbose/trace/debugging is turned on. A local unauthenticated or remote authenticated malicious user with access to logs may gain part or all of a users password.

Affected (CNA)

Vendor / productVersions
Cloud Foundry / CF CLIaffected All before v6.43.0

CWE

CWE-215

References

ADP enrichment

CVE

No English description supplied.