| Package | Affected versions | Patched versions |
|---|---|---|
| capi-release | < 1.78.0 | 1.78.0 |
Cloud Foundry Cloud Controller, versions prior to 1.78.0, contain an endpoint with improper authorization. A remote authenticated malicious user with read permissions can request package information and receive a signed bit-service url that grants the user write permissions to the bit-service.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free