Approved changes feed: RSS · Atom

cpe:2.3:a:cloudfoundry:capi-release:1.88.0:*:*:*:*:*:*:*

part: a version: 1.88.0 update: *

VendorCloudfoundry (3aa6768c-437d-5100-a420-b037598cadb4)
ProductCapi Release (80308457-c7a8-52d5-8d73-e9a1837c34af)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/cloudfoundry/capi-release purl2cpe 2026-06-01 10:12:04.813903

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-11294 vulnerable 2026-06-03 14:39:32.666674 CAPI leaks service broker URLs and GUIDs to space developers
MEDIUM (4.3)
Cloud Foundry Cloud Controller API (CAPI), version 1.88.0, allows space developers to list all global service brokers, including service broker URLs and GUIDs, which should only be accessible to admins.
Published: 2019-12-19T19:35:11.666Z
Updated: 2024-09-17T02:27:12.722Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.