High severity8.1NVD Advisory· Published Sep 23, 2019· Updated Jun 17, 2026
CVE-2019-11277
CVE-2019-11277
Description
Cloud Foundry NFS Volume Service, 1.7.x versions prior to 1.7.11 and 2.x versions prior to 2.3.0, is vulnerable to LDAP injection. A remote authenticated malicious space developer can potentially inject LDAP filters via service instance creation, facilitating the malicious space developer to deny service or perform a dictionary attack.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- cpe:2.3:a:cloudfoundry:nfs_volume_release:*:*:*:*:*:*:*:*Range: >=1.7.0,<1.7.11
- Range: <1.7.11, <2.3.0
- Cloud Foundry/CF Deploymentv5Range: All
- Cloud Foundry/CF NFS volume releasev5Range: 1.7
Patches
Vulnerability mechanics
References
1- www.cloudfoundry.org/blog/cve-2019-11277nvdVendor Advisory
News mentions
0No linked articles in our index yet.