CVE-2019-3780

8.8 highEPSS 1.4%

Cloud Foundry Container Runtime, versions prior to 0.28.0, deploys K8s worker nodes that contains a configuration file with IAAS credentials. A malicious user with access to the k8s nodes can obtain IAAS credentials allowing the user to escalate privileges to gain access to the IAAS account.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWEs: CWE-522, CWE-260
Published: 2019-03-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cloudfoundry:container_runtime

References

http://www.securityfocus.com/bid/107434
https://www.cloudfoundry.org/blog/cve-2019-3780
http://www.securityfocus.com/bid/107434
https://www.cloudfoundry.org/blog/cve-2019-3780

Check your stack JSON