← CVE Intelligence

CVE-2019-3783

Cloud Foundry Stratos Deploys With Public Default Session Store Secret PUBLISHED

Description (CNA)

Cloud Foundry Stratos, versions prior to 2.3.0, deploys with a public default session store secret. A malicious user with default session store secret can brute force another user's current Stratos session, and act on behalf of that user.

Affected (CNA)

Vendor / productVersions
Cloud Foundry / Stratosaffected All before 2.3.0

CWE

CWE-384

References

ADP enrichment

CVE

No English description supplied.