VDB
CVE-2025-22246
CVE-2025-22246
PUBLISHED
CVSS 3 LOW
Cloud Foundry UAA release versions from v77.21.0 to v7.31.0 are vulnerable to a private key exposure in logs.
EPSS 0.18% · 8.0th percentile
Risk Scores
CVSS 3.1
3
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N
EPSS Score
0.18%
8.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cloudfoundry | cf-deployment | 45.1.0 |
| Cloud Foundry | CF deployment | v45.1.0 |
| cloudfoundry | uaa_release | 77.21.0 |
| Cloud Foundry | UAA | v77.21.0 |
Timeline
- Jan 2, 2025 CVE ID Reserved
- May 13, 2025 EPSS Score
- May 13, 2025 Coalition ESS Score
- May 13, 2025 CVE Published
- May 13, 2025 PoC Published
- May 13, 2025 CVE Updated
- May 24, 2025 EPSS Score
- Jun 5, 2025 EPSS Score
- Jun 16, 2025 EPSS Score
- Jun 28, 2025 EPSS Score
- Jul 9, 2025 EPSS Score
- Jul 11, 2025 Coalition ESS Score