Medium severity6.3NVD Advisory· Published Aug 5, 2019· Updated Jun 17, 2026
CVE-2019-3800
CVE-2019-3800
Description
CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. A local authenticated malicious user with access to the CF CLI config file can act as that client, who is the owner of the leaked credentials.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
58- cpe:2.3:a:anynines:elasticsearch:*:*:*:*:*:pivotal_cloud_foundry:*:*Range: <2.1.2
- cpe:2.3:a:apigee:edge_service_broker:*:*:*:*:*:pivotal_cloud_foundry:*:*Range: <3.1.3
- cpe:2.3:a:appdynamics:application_analytics:*:*:*:*:*:pivotal_cloud_foundry:*:*Range: <4.7.652
- cpe:2.3:a:appdynamics:application_performance_monitoring:*:*:*:*:*:pivotal_cloud_foundry:*:*Range: <4.6.64
- cpe:2.3:a:appdynamics:platform_montioring:*:*:*:*:*:pivotal_cloud_foundry:*:*Range: <4.7.712
- cpe:2.3:a:contrastsecurity:service_broker:*:*:*:*:*:pivotal_cloud_foundry:*:*Range: <2.2.0
- cpe:2.3:a:cyberark:conjur_service_broker:*:*:*:*:*:pivotal_cloud_foundry:*:*Range: <1.1.1
- cpe:2.3:a:datadoghq:application_monitoring:*:*:*:*:*:pivotal_cloud_foundry:*:*Range: <1.7.0
- cpe:2.3:a:datastax:enterprise_service_broker:*:*:*:*:*:pivotal_cloud_foundry:*:*Range: <1.0.2
- cpe:2.3:a:dynatrace:service_broker:*:*:*:*:*:pivotal_cloud_foundry:*:*Range: <1.4.2
- cpe:2.3:a:forgerock:service_broker:*:*:*:*:*:pivotal_cloud_foundry:*:*Range: <2.1.2
- cpe:2.3:a:google:google_cloud_platform_service_broker:*:*:*:*:*:pivotal_cloud_foundry:*:*Range: <4.2.3
- cpe:2.3:a:ibm:websphere_liberty_:*:*:*:*:*:pivotal_cloud_foundry:*:*Range: <3.11.0
- cpe:2.3:a:microsoft:azure_log_analytics_nozzle:*:*:*:*:*:pivotal_cloud_foundry:*:*Range: <1.4.1
- cpe:2.3:a:microsoft:azure_service_broker:*:*:*:*:*:pivotal_cloud_foundry:*:*Range: <1.4.1
- cpe:2.3:a:newrelic:dotnet_extension_buildpack:*:*:*:*:*:pivotal_cloud_foundry:*:*Range: <1.1.1
- cpe:2.3:a:newrelic:service_broker:*:*:*:*:*:pivotal_cloud_foundry:*:*Range: <1.12.64
- cpe:2.3:a:pagerduty:service_broker:*:*:*:*:*:pivotal_cloud_foundry:*:*Range: <1.2.4
- cpe:2.3:a:pivotal:application_service:*:*:*:*:*:*:*:*Range: >=2.3.0,<2.3.14
- cpe:2.3:a:pivotal:cloud_foundry_autoscaling_release:*:*:*:*:*:*:*:*Range: <219
- cpe:2.3:a:pivotal:cloud_foundry_command_line_interface:*:*:*:*:*:*:*:*Range: <6.45.0
- cpe:2.3:a:pivotal:cloud_foundry_command_line_interface_release:*:*:*:*:*:*:*:*Range: <1.16.0
- cpe:2.3:a:pivotal:cloud_foundry_deployment:*:*:*:*:*:*:*:*Range: <10.0.0
- cpe:2.3:a:pivotal:cloud_foundry_deployment_concourse_tasks:*:*:*:*:*:*:*:*Range: <9.3.0
- cpe:2.3:a:pivotal:cloud_foundry_event_alerts:*:*:*:*:*:*:*:*Range: <1.2.8
- cpe:2.3:a:pivotal:cloud_foundry_healthwatch:*:*:*:*:*:*:*:*Range: >=1.4.0,<1.4.7
- cpe:2.3:a:pivotal:cloud_foundry_log_cache_release:*:*:*:*:*:*:*:*Range: <2.3.1
- cpe:2.3:a:pivotal:cloud_foundry_networking_release:*:*:*:*:*:*:*:*Range: <2.23.0
- cpe:2.3:a:pivotal:cloud_foundry_notifications:*:*:*:*:*:*:*:*Range: <58
- cpe:2.3:a:pivotal:cloud_foundry_routing_release:*:*:*:*:*:*:*:*Range: <0.189.0
- cpe:2.3:a:pivotal:cloud_foundry_smoke_test:*:*:*:*:*:*:*:*Range: <40.0.113
- cpe:2.3:a:pivotal:credhub_service_broker_for_pcf:*:*:*:*:*:*:*:*Range: <1.3.2
- cpe:2.3:a:pivotal:metric_registrar_release:*:*:*:*:*:*:*:*Range: <1.2
- cpe:2.3:a:pivotal:on_demand_service_broker:*:*:*:*:*:*:*:*Range: <0.29.0
- cpe:2.3:a:pivotal:pivotal_cloud_foundry_service_broker:*:*:*:*:*:aws:*:*Range: <1.4.13
- cpe:2.3:a:pivotal:single_sign-on:*:*:*:*:*:cloud_foundry:*:*Range: >=1.7.0,<1.7.5
- cpe:2.3:a:riverbed:steelcentral_appinternals:*:*:*:*:*:pivotal_cloud_foundry:*:*Range: <10.21.1-bl516
- cpe:2.3:a:samba:volume_service:*:*:*:*:*:pivotal_cloud_foundry:*:*Range: <1.1.1
- cpe:2.3:a:signalsciences:service_broker:*:*:*:*:*:pivotal_cloud_foundry:*:*Range: <1.1.0
- cpe:2.3:a:snyk:service_broker:*:*:*:*:*:pivotal_cloud_foundry:*:*Range: <1.0.3
- cpe:2.3:a:synopsys:seeker_iast_service_broker:*:*:*:*:*:pivotal_cloud_foundry:*:*Range: <1.2.14
- cpe:2.3:a:tibco:businessworks_buildpack:*:*:*:*:container:pivotal_cloud_foundry:*:*Range: <2.4.4
- cpe:2.3:a:wavefront:wavefront_by_vmware_nozzle:*:*:*:*:*:pivotal_cloud_foundry:*:*Range: <1.0.2
- cpe:2.3:a:yugabyte:db_enterprise:*:*:*:*:*:pivotal_cloud_foundry:*:*Range: <1.1.8
- Cloud Foundry/CF CLIv5Range: versions prior to v6.45.0
- Cloud Foundry/CF CLI Releasev5Range: v1.x before v1.16.0
Patches
Vulnerability mechanics
References
2- pivotal.io/security/cve-2019-3800nvdVendor Advisory
- www.cloudfoundry.org/blog/cve-2019-3800nvdVendor Advisory
News mentions
0No linked articles in our index yet.