Cloud foundry instances having CAPI version between 1.140 and 1.152.0 along with loggregator-agent v7+ may override other users syslog drain credentials if they're aware of the client certificate used for that syslog drain. This applies even if the drain has zero certs. This would allow the user to override the private key and add or modify a certificate authority used for the connection.
References
| Link | Resource |
|---|---|
| https://www.cloudfoundry.org/blog/cve-2023-20881-cas-for-syslog-drain-mtls-feature-can-be-overwritten/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
26 May 2023, 15:59
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://www.cloudfoundry.org/blog/cve-2023-20881-cas-for-syslog-drain-mtls-feature-can-be-overwritten/ - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.1 |
| CPE | cpe:2.3:a:cloudfoundry:cf-deployment:*:*:*:*:*:*:*:* cpe:2.3:a:cloudfoundry:capi-release:*:*:*:*:*:*:*:* cpe:2.3:a:cloudfoundry:loggregator-agent:*:*:*:*:*:*:*:* |
|
| CWE | CWE-295 | |
| First Time |
Cloudfoundry cf-deployment
Cloudfoundry Cloudfoundry loggregator-agent Cloudfoundry capi-release |
19 May 2023, 17:53
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-05-19 15:15
Updated : 2023-12-10 15:01
NVD link : CVE-2023-20881
Mitre link : CVE-2023-20881
CVE.ORG link : CVE-2023-20881
JSON object : View
Products Affected
cloudfoundry
- loggregator-agent
- cf-deployment
- capi-release
CWE
CWE-295
Improper Certificate Validation