Medium severity4.3NVD Advisory· Published Dec 19, 2019· Updated Jun 17, 2026

CVE-2019-11294

Description

Cloud Foundry Cloud Controller API (CAPI), version 1.88.0, allows space developers to list all global service brokers, including service broker URLs and GUIDs, which should only be accessible to admins.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cloudfoundry/Capi Release
cpe:2.3:a:cloudfoundry:capi-release:1.88.0:*:*:*:*:*:*:*
Cloudfoundry/Cf Deployment
cpe:2.3:a:cloudfoundry:cf-deployment:*:*:*:*:*:*:*:*
Range: <12.7.0
Cloudfoundry/Cloud Controllerllm-fuzzy
Range: =1.88.0
Cloud Foundry/CAPIv5
Range: 1.88.0

Patches

Vulnerability mechanics

References

www.cloudfoundry.org/blog/cve-2019-11294nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000