CVE-2019-3779

Cloud Foundry Container Runtime allows a user to bypass security policy when talking to ETCD

State: Published
Severity: 8.8 High
Published: Mar 8, 2019
Updated: Sep 16, 2024
Reserved: Jan 3, 2019

Description

Cloud Foundry Container Runtime, versions prior to 0.29.0, deploys Kubernetes clusters utilize the same CA (Certificate Authority) to sign and trust certs for ETCD as used by the Kubernetes API. This could allow a user authenticated with a cluster to request a signed certificate leveraging the Kubernetes CSR capability to obtain a credential that could escalate privilege access to ETCD.

Scores

CVSS	Score	Vector	Source
3.0	8.8 High	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	dell

Weaknesses

CWE-284 Improper Access Control - Generic

Affected Products

Product	Versions
Cloud Foundry Container Runtime (CFCR)Cloud Foundry	All to before v0.29.0Affected

References

https://www.cloudfoundry.org/blog/cve-2019-3779

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.