Cloud Foundry Authentication Bypass Vulnerability in cf-auth-proxy Allowing Unauthorized Log Access

An authentication bypass vulnerability has been identified in the cf-auth-proxy component of Cloud Foundry. This vulnerability affects all installations and allows an unauthenticated remote attacker to read logs and metrics from every application and platform component. The issue arises from the ability to create a JSON Web Token (JWT) that the cf-auth-proxy accepts as a valid 'logs.admin' token.

Impact

Exploitation of this vulnerability allows unauthorized access to application and platform logs and metrics, potentially leading to the disclosure of sensitive information.

Remediation

Users are advised to upgrade to Cloud Foundry log-cache_release version 3.2.7 or greater and to upgrade to CF Deployment version 55.?.0 or greater, which includes log-cache_release v3.2.7.