Unrated severityNVD Advisory· Published Mar 7, 2019· Updated Sep 16, 2024
Cloud Foundry Stratos contains a Session Collision Vulnerability
CVE-2019-3784
Description
Cloud Foundry Stratos, versions prior to 2.3.0, contains an insecure session that can be spoofed. When deployed on cloud foundry with multiple instances using the default embedded SQLite database, a remote authenticated malicious user can switch sessions to another user with the same session id.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <2.3.0
- Cloud Foundry/Stratosv5Range: All
Patches
Vulnerability mechanics
References
1- www.cloudfoundry.org/blog/cve-2019-3784mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.