CVE:CVE-2023-20881
CNNVD:CNNVD-202305-1880
Cloud Foundry CAPI是美国Cloud Foundry基金会的一个云控制器。
Cloud Foundry CAPI 1.140 到 1.152.0版本、Loggregator-agent v7+、CF Deployment 24.7.0 到 29.0.0版本存在安全漏洞，该漏洞源于Cloud foundry 实例以及 loggregator-agent v7+ 可能会覆盖其他用户的 syslog drain 凭据，攻击者利用该漏洞可以覆盖私钥并添加或修改用于连接的证书颁发机构。
solution:Upgrade cloudfoundry capi-release to a higher version than 1.152.0,and avoid the version [1.140,1.152.0]; Upgrade cloudfoundry cf-deployment to a higher version than 29.0.0,and avoid the version [24.7.0,29.0.0]; Upgrade cloudfoundry loggregator-agent to a higher version than 7.2.1,and avoid the version [7.0,7.2.1]