| Package | Affected versions | Patched versions |
|---|---|---|
| bits service | < 2.14.0 | 2.14.0 |
Cloud Foundry Bits Service Release, versions prior to 2.14.0, uses an insecure hashing algorithm to sign URLs. A remote malicious user may obtain a signed URL and extract the signing key, allowing them complete read and write access to the the Bits Service storage.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free