CVE-2019-3800
CF CLI writes the client id and secret to config file
CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. A local authenticated malicious user with access to the CF CLI config file can act as that client, who is the owner of the leaked credentials.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
CF CLI writes the client id and secret to config file
CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. A local authenticated malicious user with access to the CF CLI config file can act as that client, who is the owner of the leaked credentials.
- Record
CVE-2019-3800- CVSS 3.0
- 6.3 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L - Weakness
- CWE-522
- Updated
- 2026-11-02
EUVDEUVD-2019-13427
CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. A local authenticated malicious user with access to the CF CLI config file can act as that client, who is the owner of the leaked credentials.
- Record
EUVD-2019-13427- CVSS 3.0
- 6.3 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2wpx-p7qg-954w
CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to...
CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. A local authenticated malicious user with access to the CF CLI config file can act as that client, who is the owner of the leaked credentials.
- Record
GHSA-2wpx-p7qg-954w- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-200, CWE-522
- Updated
- 2026-11-02
NVD
CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. A local authenticated malicious user with access to the CF CLI config file can act as that client, who is the owner of the leaked credentials.
- Record
CVE-2019-3800- CVSS 3.0
- 6.3 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L - CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-522, CWE-200
- Updated
- 2026-11-02
OSV
CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. A local authenticated malicious user with access to the CF CLI config file can act as that client, who is the owner of the leaked credentials.
- Record
CVE-2019-3800- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
- cloud foundry cf cli
- cloud foundry cf cli release
- anynines elasticsearch
- anynines logme
- anynines mongodb
- anynines mysql
- anynines postgresql
- anynines rabbitmq
- anynines redis
- apigee edge service broker
- appdynamics application analytics
- appdynamics application performance monitoring
Show 45 moreShow less
- appdynamics platform montioring
- bluemedora nozzle
- contrastsecurity service broker
- cyberark conjur service broker
- datadoghq application monitoring
- datastax enterprise service broker
- dynatrace service broker
- forgerock service broker
- google cloud platform service broker
- ibm websphere liberty
- microsoft azure log analytics nozzle
- microsoft azure service broker
- newrelic dotnet extension buildpack
- newrelic nozzle
- newrelic service broker
- pagerduty service broker
- pivotal application service
- pivotal cloud foundry autoscaling release
- pivotal cloud foundry command line interface
- pivotal cloud foundry command line interface release
- pivotal cloud foundry deployment
- pivotal cloud foundry deployment concourse tasks
- pivotal cloud foundry event alerts
- pivotal cloud foundry healthwatch
- pivotal cloud foundry log cache release
- pivotal cloud foundry networking release
- pivotal cloud foundry notifications
- pivotal cloud foundry routing release
- pivotal cloud foundry smoke test
- pivotal credhub service broker for pcf
- pivotal metric registrar release
- pivotal on demand service broker
- pivotal cloud foundry service broker
- pivotal single sign-on
- riverbed steelcentral appinternals
- samba volume service
- signalsciences service broker
- snyk service broker
- solace pubsub\+
- splunk nozzle
- sumologic nozzle
- synopsys seeker iast service broker
- tibco businessworks buildpack
- wavefront by vmware nozzle
- yugabyte db enterprise
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-3800 is a medium vulnerability (CVSS 6.3) in Cloud Foundry Cf Cli, published August 5, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.09%, the 81st percentile. No source names a fixed version.