CVE-2019-3784

6.5 mediumEPSS 1.1%

Medium (6.5) in cloudfoundry stratos. EPSS 1.1% chance of exploitation in the next 30 days.

Cloud Foundry Stratos, versions prior to 2.3.0, contains an insecure session that can be spoofed. When deployed on cloud foundry with multiple instances using the default embedded SQLite database, a remote authenticated malicious user can switch sessions to another user with the same session id.

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-384
Published: 2019-03-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cloudfoundry:stratos

References

https://www.cloudfoundry.org/blog/cve-2019-3784
https://www.cloudfoundry.org/blog/cve-2019-3784

Check your stack JSON