Cloud Foundry Container Runtime (Cfcr)

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:cloud_foundry:cloud_foundry_container_runtime_(cfcr):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCloud Foundry (bbc462c7-a964-5178-97e1-18033ab4dbd3)
ProductCloud Foundry Container Runtime (Cfcr) (e0b0ef9b-a3e7-5ccc-b06d-c60522902535)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-3780 vulnerable 2026-06-03 14:40:27.454247 Cloud Foundry Container Runtime Leaks IAAS Credentials
CRITICAL (9.1)
Cloud Foundry Container Runtime, versions prior to 0.28.0, deploys K8s worker nodes that contains a configuration file with IAAS credentials. A malicious user with access to the k8s nodes can obtain IAAS credentials allowing the user to escalate privileges to gain access to the IAAS account.
Published: 2019-03-08T16:00:00.000Z
Updated: 2024-09-16T22:45:16.571Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3779 vulnerable 2026-06-03 14:40:27.453069 Cloud Foundry Container Runtime allows a user to bypass security policy when talking to ETCD
HIGH (8.8)
Cloud Foundry Container Runtime, versions prior to 0.29.0, deploys Kubernetes clusters utilize the same CA (Certificate Authority) to sign and trust certs for ETCD as used by the Kubernetes API. This could allow a user authenticated with a cluster to request a signed certificate leveraging the Kubernetes CSR capability to obtain a credential that could escalate privilege access to ETCD.
Published: 2019-03-08T16:00:00.000Z
Updated: 2024-09-16T18:55:26.386Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.