High severity8.1NVD Advisory· Published May 19, 2023· Updated Jun 17, 2026

CVE-2023-20881

Description

Cloud foundry instances having CAPI version between 1.140 and 1.152.0 along with loggregator-agent v7+ may override other users syslog drain credentials if they're aware of the client certificate used for that syslog drain. This applies even if the drain has zero certs. This would allow the user to override the private key and add or modify a certificate authority used for the connection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cloudfoundry/Capi Release
cpe:2.3:a:cloudfoundry:capi-release:*:*:*:*:*:*:*:*
Range: >=1.140,<=1.152.0
Cloudfoundry/Cf Deployment
cpe:2.3:a:cloudfoundry:cf-deployment:*:*:*:*:*:*:*:*
Range: >=24.7.0,<=29.0.0
Cloudfoundry/Loggregator Agent
cpe:2.3:a:cloudfoundry:loggregator-agent:*:*:*:*:*:*:*:*
Range: >=7.0,<=7.2.1
Cloud foundry/CAPIdescription
Cloudfoundry/Cloud Foundryllm-fuzzy
Range: 1.140 - 1.152.0

Patches

Vulnerability mechanics

References

www.cloudfoundry.org/blog/cve-2023-20881-cas-for-syslog-drain-mtls-feature-can-be-overwritten/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000