[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fcRF4q_VBsCCKVAfy4TR8SsWuYO2PygfivSiArzpto5Q":3,"g5a-risk:CVE-2019-3780":130},{"success":4,"data":5,"meta":128},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":52,"epssPercentile":26,"epssTimeSeries":53,"severity":54,"affectedProducts":55,"affectedProductsCount":61,"references":62,"referencesCount":74,"weaknesses":75,"weaknessesCount":74,"isActivelyExploited":90,"cisaInfo":26,"otxData":26,"relatedBlogPosts":91,"seoMetadata":92,"configurations":117,"relatedVendorCves":126,"notableEvents":127},"CVE-2019-3780","What is CVE-2019-3780?","Cloud Foundry Container Runtime, versions prior to 0.28.0, deploys K8s worker nodes that contains a configuration file with IAAS credentials. A malicious user with access to the k8s nodes can obtain IAAS credentials allowing the user to escalate privileges to gain access to the IAAS account.","Cloud Foundry Container Runtime, versions prior to 0.28.0, deploys K8s worker nodes that contains a configuration file with IAAS credentials. A malicious use...","2019-03-08T16:29:00.287","2020-10-19T17:56:16.883",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":41,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,[30],{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":39,"ImpactScore":40},"security_alert@emc.com","Secondary",{"Version":34,"VectorString":35,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":25,"UserInteraction":23,"Scope":36,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":37,"BaseSeverity":38,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H","CHANGED",9.1,"CRITICAL",2.3,6,[42],{"Source":17,"Type":18,"CVSSData":43,"BaseSeverity":49,"ExploitabilityScore":50,"ImpactScore":51,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":44,"VectorString":45,"AccessVector":21,"AccessComplexity":22,"Authentication":46,"ConfidentialityImpact":47,"IntegrityImpact":47,"AvailabilityImpact":47,"BaseScore":48,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,"MEDIUM",8,6.4,0.01429,[52,52,52,52,52,52,52],"High",[56],{"vendor":57,"product":58,"version":59,"criteria":60,"vulnerable":4},"cloudfoundry","container_runtime","*","cpe:2.3:a:cloudfoundry:container_runtime:*:*:*:*:*:*:*:*",1,[63,69],{"url":64,"source":65,"tags":66},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F107434","Securityfocus",[67,68],"Third Party Advisory","VDB Entry",{"url":70,"source":71,"tags":72},"https:\u002F\u002Fwww.cloudfoundry.org\u002Fblog\u002Fcve-2019-3780","Cloudfoundry",[73],"Vendor Advisory",2,[76,84],{"id":77,"name":78,"description":79,"extendedDescription":80,"status":81,"abstraction":82,"structure":83},"CWE-260","Password in Configuration File","The product stores a password in a configuration file that might be accessible to actors who do not know the password.","This can result in compromise of the system for which the password is used. An attacker could gain access to this file and learn the stored password or worse yet, change the password to one of their choosing.","Incomplete","Base","Simple",{"id":85,"name":86,"description":87,"extendedDescription":88,"status":81,"abstraction":89,"structure":83},"CWE-522","Insufficiently Protected Credentials","The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and\u002For retrieval.","","Class",false,[],{"title":93,"metaDescription":94,"keywords":95,"canonicalUrl":96,"structuredData":97},"What is CVE-2019-3780? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-3780, a high severity cyber security vulnerability from 2019. Cloud Foundry Container Runtime, versions prior to 0.28.0, d...","CVE-2019-3780, CVE-2019-3780 vulnerability, CVE-2019-3780 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, cloudfoundry security, container_runtime vulnerability","\u002Fwhat-is\u002Fcve-2019-3780",{"@context":98,"@type":99,"headline":93,"description":94,"datePublished":10,"dateModified":11,"author":100,"publisher":104,"about":108,"mainEntityOfPage":112,"articleSection":115,"keywords":116},"https:\u002F\u002Fschema.org","TechArticle",{"@type":101,"name":102,"url":103},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":101,"name":102,"url":103,"logo":105},{"@type":106,"url":107},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":109,"name":6,"description":110,"additionalType":111},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":113,"@id":114},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-3780","Cybersecurity","CVE-2019-3780, CVE-2019-3780 vulnerability, CVE-2019-3780 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[118],{"Operator":26,"Negate":26,"Nodes":119},[120],{"Operator":121,"Negate":26,"CPEMatch":122},"OR",[123],{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":124,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":125,"VersionEndIncluding":26},"6521F765-81EE-4001-BB4A-FA904C577E2A","0.28.0",[],[],{"lastModified":11,"cacheTime":129,"version":44},1792378636595,{"score":131,"band":132,"action":133,"scoredAt":134},47,"Medium","Plan remediation","2026-10-16T06:45:44.600178+00:00"]