Cloud Foundry Capi and CF Deployment Unprotected Internal Endpoint Vulnerability Allowing Code Injection

A vulnerability exists in Cloud Foundry Capi Release 1.226.0 and earlier, as well as CF Deployment v54.9.0 and earlier on all platforms. This vulnerability arises from unprotected internal endpoints that allow users who have bypassed the firewall to potentially replace application droplets. By doing so, they could inject malicious code into the application environment, accessing secure application information.

Impact

Exploitation of this vulnerability could lead to unauthorized code injection into Cloud Foundry applications by replacing application droplets, potentially allowing access to sensitive application data.

Remediation

Users are advised to upgrade to Cloud Foundry Capi Release versions 1.227.0 or greater and to upgrade CF Deployment to version 54.10.0 or greater.