PatchTheCVECVE-2020-5417: Cloud Foundry CAPI (Cloud Controller), versions prior to 1.97.0, when used in a deployment where an app domain
CVE-2020-5417 is a high-severity flaw (CVSS 8.8) affecting capi-release, cf-deployment. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Cloud Foundry CAPI (Cloud Controller), versions prior to 1.97.0, when used in a deployment where an app domain is also the system domain (which is true in the default CF Deployment manifest), were vulnerable to developers maliciously or accidentally claiming certain sensitive routes, potentially resulting in the developer's app handling some requests that were expected to go to certain system components.
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 8.8 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 1.0% (top 38%) |
| CISA exploited list | No |
| Weakness | CWE-732 |
| Published | 2020-08-21 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2020-5417?
capi-release: upgrade to 1.97.0; cf-deployment: upgrade to 13.12.0. Exact commands for each OS are on this page.
Is CVE-2020-5417 being exploited?
CVE-2020-5417 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2020-5417 affect?
CVE-2020-5417 affects capi-release, cf-deployment. Severity is high (CVSS 8.8). Cloud Foundry CAPI (Cloud Controller), versions prior to 1.97.0, when used in a deployment where an app domain is also the system domain (which is true in the default CF Deployment manifest), were vulnerable to developers maliciously or acc
How urgent is CVE-2020-5417?
Priority 46/100. High severity
Related CVEs
- CVE-2023-20881 HIGH 8.1 UPGRADE UPGRADE Cloud foundry instances having CAPI version between 1.140 and 1.152.0 along with loggregator-agent v7+ may ove
- CVE-2021-22115 MEDIUM 6.5 UPGRADE UPGRADE Cloud Controller API versions prior to 1.106.0 logs service broker credentials if the default value of db logg
- CVE-2021-22101 HIGH 7.5 UPGRADE UPGRADE Cloud Controller versions prior to 1.118.0 are vulnerable to unauthenticated denial of Service(DoS) vulnerabil
- CVE-2021-22100 MEDIUM 5.3 UPGRADE UPGRADE In cloud foundry CAPI versions prior to 1.122, a denial-of-service attack in which a developer can push a serv
- CVE-2020-5423 HIGH 7.5 UPGRADE UPGRADE CAPI (Cloud Controller) versions prior to 1.101.0 are vulnerable to a denial-of-service attack in which an una