What is CVE-2020-5400?

CVE-2020-5400 is a medium-severity vulnerability in Cloud Foundry Capi, classified under Insufficiently Protected Credentials. CVSS score: 6.5/10. Published 2020-02-27.

How severe is CVE-2020-5400?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Information disclosure in Cloud Foundry Capi

CVE-2020-5400

Cloud Foundry Cloud Controller (CAPI), versions prior to 1.91.0, logs properties of background jobs when they are run, which may include sensitive information such as credentials if provided to the job. A malicious user with access to thos…

EPSS: 0.008 (51.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Cloud Foundry Capi — versions unspecified
Cloudfoundry Capi-release
Cloudfoundry Cf-deployment

Weakness classification (CWE)

References

security@pivotal.io (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2020-5400?: CVE-2020-5400 is a medium-severity vulnerability in Cloud Foundry Capi, classified under Insufficiently Protected Credentials. CVSS score: 6.5/10. Published 2020-02-27.
How severe is CVE-2020-5400?: Medium severity. CVSS v3 base score is 6.5 out of 10.