CVE:CVE-2019-3800
CNNVD:CNNVD-201907-1355
Cloud Foundry CLI是美国Cloud Foundry基金会的一款用于Cloud Foundry的命令行客户端程序。
Cloud Foundry CLI中存在信息泄露漏洞。本地攻击者可利用该漏洞获取敏感信息，执行操作。以下产品及版本受到影响：Cloud Foundry CF CLI 6.45.0之前版本；CF CLI Release 1.16.0之前版本；CF Networking Release 2.23.0之前版本；CF Routing Release 0.189.0之前版本；CF Smoke Tests 40.0.113之前版本；CF Deployment 10.0.0之前版本；CF Deployment Concourse Tasks 9.3.0之前版本；CF Log Cache Release 2.3.1之前版本；CF Notifications 58之前版本。
solution:Upgrade pivotal cloud_foundry_command_line_interface to a higher version than 6.45.0,and avoid the version (,6.45.0); Upgrade pivotal cloud_foundry_command_line_interface_release to a higher version than 1.16.0,and avoid the version (,1.16.0); Upgrade pivotal cloud_foundry_deployment to a higher version than 10.0.0,and avoid the version (,10.0.0); Upgrade pivotal cloud_foundry_deployment_concourse_tasks to a higher version than 9.3.0,and avoid the version (,9.3.0); Upgrade pivotal cloud_foundry_log_cache_release to a higher version than 2.3.1,and avoid the version (,2.3.1); Upgrade pivotal cloud_foundry_networking_release to a higher version than 2.23.0,and avoid the version (,2.23.0); Upgrade pivotal cloud_foundry_notifications to a higher version than 58,and avoid the version (,58); Upgrade pivotal cloud_foundry_routing_release to a higher version than 0.189.0,and avoid the version (,0.189.0); Upgrade pivotal cloud_foundry_smoke_test to a higher version than 40.0.113,and avoid the version (,40.0.113); Upgrade pivotal application_service to a higher version than 2.3.14,2.4.10,2.5.6,and avoid the version [2.3.0,2.3.14),[2.4.0,2.4.10),[2.5.0,2.5.6); Upgrade pivotal cloud_foundry_autoscaling_release to a higher version than 219,and avoid the version (,219); Upgrade pivotal cloud_foundry_event_alerts to a higher version than 1.2.8,and avoid the version (,1.2.8); Upgrade pivotal cloud_foundry_healthwatch to a higher version than 1.4.7,1.5.4,and avoid the version [1.4.0,1.4.7),[1.5.0,1.5.4); Upgrade pivotal credhub_service_broker_for_pcf to a higher version than 1.3.2,and avoid the version (,1.3.2); Upgrade pivotal metric_registrar_release to a higher version than 1.2,and avoid the version (,1.2); Upgrade pivotal on_demand_service_broker to a higher version than 0.29.0,and avoid the version (,0.29.0); Upgrade pivotal pivotal_cloud_foundry_service_broker to a higher version than 1.4.13,and avoid the version (,1.4.13); Upgrade pivotal single_sign-on to a higher version than 1.7.5,1.8.4,1.9.1,and avoid the version [1.7.0,1.7.5),[1.8.0,1.8.4),[1.9.0,1.9.1); Upgrade anynines elasticsearch to a higher version than 2.1.2,and avoid the version (,2.1.2); Upgrade anynines logme to a higher version than 2.1.2,and avoid the version (,2.1.2); Upgrade anynines mongodb to a higher version than 2.1.2,and avoid the version (,2.1.2); Upgrade anynines mysql to a higher version than 2.1.2,and avoid the version (,2.1.2); Upgrade anynines postgresql to a higher version than 2.1.2,and avoid the version (,2.1.2); Upgrade anynines rabbitmq to a higher version than 2.1.2,and avoid the version (,2.1.2); Upgrade anynines redis to a higher version than 2.1.2,and avoid the version (,2.1.2); Upgrade apigee edge_service_broker to a higher version than 3.1.3,and avoid the version (,3.1.3); Upgrade appdynamics application_analytics to a higher version than 4.7.652,and avoid the version (,4.7.652); Upgrade appdynamics application_performance_monitoring to a higher version than 4.6.64,and avoid the version (,4.6.64); Upgrade appdynamics platform_montioring to a higher version than 4.7.712,and avoid the version (,4.7.712); Upgrade bluemedora nozzle to a higher version than 3.1.1,and avoid the version (,3.1.1); Upgrade contrastsecurity service_broker to a higher version than 2.2.0,and avoid the version (,2.2.0); Upgrade cyberark conjur_service_broker to a higher version than 1.1.1,and avoid the version (,1.1.1); Upgrade datadoghq application_monitoring to a higher version than 1.7.0,and avoid the version (,1.7.0); Upgrade datastax enterprise_service_broker to a higher version than 1.0.2,and avoid the version (,1.0.2); Upgrade dynatrace service_broker to a higher version than 1.4.2,and avoid the version (,1.4.2); Upgrade forgerock service_broker to a higher version than 2.1.2,and avoid the version (,2.1.2); Upgrade google google_cloud_platform_service_broker to a higher version than 4.2.3,and avoid the version (,4.2.3); Upgrade ibm websphere_liberty_ to a higher version than 3.11.0,and avoid the version (,3.11.0); Upgrade microsoft azure_log_analytics_nozzle to a higher version than 1.4.1,and avoid the version (,1.4.1); Upgrade microsoft azure_service_broker to a higher version than 1.4.1,and avoid the version (,1.4.1); Upgrade newrelic dotnet_extension_buildpack to a higher version than 1.1.1,and avoid the version (,1.1.1); Upgrade newrelic nozzle to a higher version than 1.1.17,and avoid the version (,1.1.17); Upgrade newrelic service_broker to a higher version than 1.12.64,and avoid the version (,1.12.64); Upgrade pagerduty service_broker to a higher version than 1.2.4,and avoid the version (,1.2.4); Upgrade riverbed steelcentral_appinternals to a higher version than 10.21.1-bl516,and avoid the version (,10.21.1-bl516); Upgrade samba volume_service to a higher version than 1.1.1,and avoid the version (,1.1.1); Upgrade signalsciences service_broker to a higher version than 1.1.0,and avoid the version (,1.1.0); Upgrade snyk service_broker to a higher version than 1.0.3,and avoid the version (,1.0.3); Upgrade solace pubsub+ to a higher version than 2.3.2,and avoid the version (,2.3.2); Upgrade splunk nozzle to a higher version than 1.1.1,and avoid the version (,1.1.1); Upgrade sumologic nozzle to a higher version than 1.0.1,and avoid the version (,1.0.1); Upgrade synopsys seeker_iast_service_broker to a higher version than 1.2.14,and avoid the version (,1.2.14); Upgrade tibco businessworks_buildpack to a higher version than 2.4.4,and avoid the version (,2.4.4); Upgrade wavefront wavefront_by_vmware_nozzle to a higher version than 1.0.2,and avoid the version (,1.0.2); Upgrade yugabyte db_enterprise to a higher version than 1.1.8,and avoid the version (,1.1.8)