CVE-2019-3784

Cloud Foundry Stratos, versions prior to 2.3.0, contains an insecure session that can be spoofed. When deployed on cloud foundry with multiple instances using the default embedded SQLite database, a remote authenticated malicious user can switch sessions to another user with the same session id.

CVSS v3 8.2 HIGH
CVSS v2.0 4.0 MEDIUM

8.2^/10

CVSS v3 : HIGH

Vector : AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

Exploitability : 1.8 / Impact : 5.8

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope CHANGED

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:N/I:P/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://www.cloudfoundry.org/blog/cve-2019-3784	Vendor Advisory
https://www.cloudfoundry.org/blog/cve-2019-3784	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:cloudfoundry:stratos:*:*:*:*:*:*:*:*

History

21 Nov 2024, 04:42

Type	Values Removed	Values Added
References	~~() https://www.cloudfoundry.org/blog/cve-2019-3784 - Vendor Advisory~~	() https://www.cloudfoundry.org/blog/cve-2019-3784 - Vendor Advisory
CVSS	v2 : ~~4.0~~ v3 : ~~6.5~~	v2 : 4.0 v3 : 8.2

Information

Published : 2019-03-07 18:29

Updated : 2024-11-21 04:42

NVD link : CVE-2019-3784

Mitre link : CVE-2019-3784

CVE.ORG link : CVE-2019-3784

JSON object : View

Products Affected

cloudfoundry

stratos

CWE

CWE-384

Session Fixation

{"id": "CVE-2019-3784", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Secondary", "source": "security_alert@emc.com", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.8, "exploitabilityScore": 1.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2019-03-07T18:29:00.663", "references": [{"url": "https://www.cloudfoundry.org/blog/cve-2019-3784", "tags": ["Vendor Advisory"], "source": "security_alert@emc.com"}, {"url": "https://www.cloudfoundry.org/blog/cve-2019-3784", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security_alert@emc.com", "description": [{"lang": "en", "value": "CWE-384"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-384"}]}], "descriptions": [{"lang": "en", "value": "Cloud Foundry Stratos, versions prior to 2.3.0, contains an insecure session that can be spoofed. When deployed on cloud foundry with multiple instances using the default embedded SQLite database, a remote authenticated malicious user can switch sessions to another user with the same session id."}, {"lang": "es", "value": "Cloud Foundry Stratos, en versiones anteriores a 2.3.0, contiene una sesi\u00f3n insegura que se podr\u00eda suplantar. Al desplegarse en cloud foundry con m\u00faltiples instancias utilizando la base de datos SQLite embebida por defecto, un usuario remoto autenticado malicioso podr\u00eda modificar las sesiones de otro usuario con el mismo id de sesi\u00f3n."}], "lastModified": "2024-11-21T04:42:32.183", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cloudfoundry:stratos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "433D6606-4425-4119-8769-0FC47B4D0913", "versionEndExcluding": "2.3.0"}], "operator": "OR"}]}], "sourceIdentifier": "security_alert@emc.com"}