CVE-2020-5400

6.5 mediumEPSS 0.8%

Medium (6.5) in cloudfoundry. EPSS 0.8% chance of exploitation in the next 30 days.

Cloud Foundry Cloud Controller (CAPI), versions prior to 1.91.0, logs properties of background jobs when they are run, which may include sensitive information such as credentials if provided to the job. A malicious user with access to those logs may gain unauthorized access to resources protected by such credentials.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWEs: CWE-532, CWE-522
Published: 2020-02-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cloudfoundry:capi-release
cloudfoundry:cf-deployment

References

https://www.cloudfoundry.org/blog/cve-2020-5400
https://www.cloudfoundry.org/blog/cve-2020-5400

Check your stack JSON