Medium severity6.5NVD Advisory· Published Feb 27, 2020· Updated Jun 17, 2026

CVE-2020-5400

Description

Cloud Foundry Cloud Controller (CAPI), versions prior to 1.91.0, logs properties of background jobs when they are run, which may include sensitive information such as credentials if provided to the job. A malicious user with access to those logs may gain unauthorized access to resources protected by such credentials.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cloudfoundry/Capi Release
cpe:2.3:a:cloudfoundry:capi-release:*:*:*:*:*:*:*:*
Range: <1.91.0
Cloudfoundry/Cf Deployment
cpe:2.3:a:cloudfoundry:cf-deployment:*:*:*:*:*:*:*:*
Range: <12.33.0
Cloudfoundry/Cloud Controllerllm-fuzzy
Range: <1.91.0
Cloud Foundry/CAPIv5
Range: unspecified

Patches

Vulnerability mechanics

References

www.cloudfoundry.org/blog/cve-2020-5400nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000