What is CVE-2019-3779?

CVE-2019-3779 is a high-severity vulnerability in Cloud Foundry Container Runtime (Cfcr), classified under Improper Access Control. CVSS score: 8.8/10. Published 2019-03-08.

How severe is CVE-2019-3779?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Cloud Foundry Container Runtime (Cfcr)

CVE-2019-3779

Cloud Foundry Container Runtime, versions prior to 0.29.0, deploys Kubernetes clusters utilize the same CA (Certificate Authority) to sign and trust certs for ETCD as used by the Kubernetes API. This could allow a user authenticated with a…

EPSS: 0.007 (47.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Cloud Foundry Container Runtime (Cfcr) — versions All
Cloudfoundry Container_runtime

Weakness classification (CWE)

References

security_alert@emc.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-3779?: CVE-2019-3779 is a high-severity vulnerability in Cloud Foundry Container Runtime (Cfcr), classified under Improper Access Control. CVSS score: 8.8/10. Published 2019-03-08.
How severe is CVE-2019-3779?: High severity. CVSS v3 base score is 8.8 out of 10.