High severity8.1NVD Advisory· Published Mar 13, 2019· Updated Jun 17, 2026
CVE-2019-3785
CVE-2019-3785
Description
Cloud Foundry Cloud Controller, versions prior to 1.78.0, contain an endpoint with improper authorization. A remote authenticated malicious user with read permissions can request package information and receive a signed bit-service url that grants the user write permissions to the bit-service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <1.78.0
- Cloud Foundry/CAPIv5Range: All
Patches
Vulnerability mechanics
References
2- www.securityfocus.com/bid/107514nvdThird Party AdvisoryVDB Entry
- www.cloudfoundry.org/blog/cve-2019-3785nvdVendor Advisory
News mentions
0No linked articles in our index yet.