Intel

CVE-2019-3786

bosh_backup_and_restore: Improper Privilege Management (CVE-2019-3786)

highEPSS 0.6%

Description

Cloud Foundry BOSH Backup and Restore CLI, all versions prior to 1.5.0, does not check the authenticity of backup scripts in BOSH. A remote authenticated malicious user can modify the metadata file of a Bosh Backup and Restore job to request extra backup files from different jobs upon restore. The exploited hooks in this metadata script were only maintained in the cfcr-etcd-release, so clusters deployed with the BBR job for etcd in this release are vulnerable.

Source: CVELISTV5NVD

Metrics

Severity
high
Priority score
66.01
KEV status
—
Exploit maturity
no public PoC known
XIEM Effective CVSS
7.7
Source: cna-v3
CVSS v3
7.7
CVSS v4
—
EPSS percentile
45.9 %
High — this CVE ranks above the median of all CVEs scored today (rank ≥ 36%).
EPSS score
0.6 %
Low — model estimates < 1% exploitation likelihood.
Published
2019-04-24 15:21 UTC
CWE
CWE-269

Weakness classes (CWE)

  • CWE-269Class

    Improper Privilege Management

    The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

    cwe.mitre.org →

Affected products

Products and version ranges extracted from the vendor/CERT advisory. A range like „<4.14.6“ implies the update recommendation „upgrade to 4.14.6 or later“.

  • cloudfoundry

    bosh_backup_and_restore1.5.0

References & sources

IDCVE-2019-3786