CVE-2019-3800

score

<0.1

cvss

6.3

epss

2.1%

published

2019-08-05

kev added

—

first seen

2026-10-21

CF CLI prior to v6.45.0 writes client id and secret to its config file when authenticating with --client-credentials, letting local authenticated malicious users act as that client, exploit requires local access to config file.