Medium
Security advisory
Cloud Controller API versions prior to 1.106.0 logs service broker credentials if the default value of db logging config field is changed. CAPI database logs service broker password in plain text whenever a job to clean up orphaned items is run by Cloud Controller.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2021-22115
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 07:23 UTC · Revision 1
Source evidence
Cloud Controller API versions prior to 1.106.0 logs service broker credentials if the default value of db logging config field is changed. CAPI database logs service broker password in plain text whenever a job to clean up orphaned items is run by Cloud Controller.
osv:CVE-2021-22115
Complete source record
{
"id": "d0e0089b4f0b66016bed8bd2381605670686d822c229bae2895bd523eb3f8adb",
"url": "https://osv.dev/vulnerability/CVE-2021-22115",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2021-22115",
"summary": "Cloud Controller API versions prior to 1.106.0 logs service broker credentials if the default value of db logging config field is changed. CAPI database logs service broker password in plain text whenever a job to clean up orphaned items is run by Cloud Controller.",
"evidence": "osv:CVE-2021-22115",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2021-22115",
"aliases": [
"CVE-2021-22115"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/cloudfoundry/capi-release",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "2cd83e8d6ba1e88c89c468c88e442a16ec48e154"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:cloudfoundry:capi-release:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "1.106.0"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"1.104.0",
"1.103.0",
"1.102.0",
"1.101.0",
"1.89.0",
"1.95.0",
"1.94.0",
"1.92.0",
"1.91.0",
"1.90.0",
"1.87.0",
"1.86.0",
"1.85.0",
"1.84.0",
"1.83.0",
"1.80.0",
"1.82.0",
"1.79.0",
"list",
"1.77.0",
"1.76.0",
"1.75.0",
"1.74.0",
"1.72.0",
"1.70.0",
"1.69.0",
"1.66.0",
"1.67.0",
"1.65.0",
"1.64.0",
"1.63.0",
"1.62.0",
"1.58.0",
"1.59.0",
"1.57.0",
"1.55.0",
"1.53.0",
"1.52.0",
"1.51.0",
"1.49.0",
"1.40.0",
"1.28.0",
"1.50.0",
"1.47.0",
"1.46.0",
"1.42.0",
"1.41.0",
"1.38.0",
"1.36.0",
"1.35.0",
"1.34.0",
"1.33.0",
"1.32.0",
"1.31.0",
"1.30.0",
"1.27.0",
"1.26.0",
"1.25.0",
"1.24.0",
"1.23.0",
"1.22.0",
"1.21.0",
"1.20.0",
"1.19.0",
"1.16.0",
"1.15.0",
"1.14.0",
"1.13.0",
"1.12.0",
"1.11.0",
"1.10.0",
"1.9.0",
"1.8.0",
"1.7.0",
"1.6.0",
"1.5.0",
"1.4.0",
"1.3.0",
"1.2.0",
"1.1.0",
"v1.0.0",
"1.0.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-22115.json"
}
},
{
"ranges": [
{
"repo": "https://github.com/cloudfoundry/cf-deployment",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "62534baf2abc87ba912ce90548019314f8b68d42"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-deployment:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "16.2.0"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"v16.1.0",
"v16.0.0",
"v15.7.0",
"v15.6.0",
"v15.5.0",
"v15.4.0",
"v15.3.0",
"v15.2.0",
"v15.1.0",
"v15.0.0",
"v14.0.0",
"v13.23.0",
"v13.22.0",
"v13.21.0",
"v13.20.0",
"v13.19.0",
"v13.18.0",
"v13.17.0",
"v13.16.0",
"v13.15.0",
"v13.14.0",
"v13.13.0",
"v13.12.0",
"v13.11.0",
"v13.10.0",
"v13.9.0",
"v13.8.0",
"v13.7.0",
"v13.6.0",
"v13.5.0",
"v13.4.0",
"v13.3.0",
"v13.2.0",
"v13.1.0",
"v13.0.0",
"v12.45.0",
"v12.44.0",
"v12.43.0",
"v12.42.0",
"v12.41.0",
"v12.40.0",
"v12.39.0",
"v12.38.0",
"v12.37.0",
"v12.36.0",
"v12.35.0",
"v12.34.0",
"v12.33.0",
"v12.32.0",
"v12.31.0",
"v12.30.0",
"v12.29.0",
"v12.28.0",
"v12.27.0",
"v12.26.0",
"v12.25.0",
"v12.24.0",
"v12.23.0",
"v12.22.0",
"v12.21.0",
"v12.20.0",
"v12.19.0",
"v12.18.0",
"v12.17.0",
"v12.16.0",
"v12.15.0",
"v12.14.0",
"v12.13.0",
"v12.12.0",
"v12.11.0",
"v12.10.0",
"v12.9.0",
"v12.8.0",
"v12.7.0",
"v12.6.0",
"v12.5.0",
"v12.4.0",
"v12.3.0",
"v12.2.0",
"v12.1.0",
"v12.0.0",
"v11.2.0",
"v11.1.0",
"v11.0.0",
"v10.1.0",
"v10.0.0",
"v7.9.0",
"v7.8.0",
"v7.6.0",
"v7.5.0",
"v7.4.0",
"v7.3.0",
"v7.2.0",
"v7.1.0",
"v7.0.0",
"v6.10.0",
"v6.9.0",
"v6.8.0",
"v6.7.0",
"v6.6.0",
"v6.5.0",
"v6.4.0",
"v6.3.0",
"v6.2.0",
"v6.1.0",
"v6.0.0",
"v5.5.0",
"v5.4.0",
"v5.3.0",
"v5.1.0",
"v5.0.0",
"v4.5.0",
"v4.4.0",
"v4.3.0",
"v4.2.0",
"v4.1.0",
"v4.0.0",
"v3.6.0",
"v3.5.0",
"v3.4.0",
"v3.3.0",
"v3.2.0",
"v3.1.0",
"v3.0.0",
"v2.5.0",
"v2.4.0",
"v2.3.0",
"v2.2.0",
"v2.1.0",
"v2.0.0",
"v1.38.0",
"v1.37.0",
"v1.36.0",
"v1.35.0",
"v1.34.0",
"v1.33.0",
"v1.32.0",
"v1.31.0",
"v1.30.0",
"v1.29.0",
"v1.28.0",
"v1.27.0",
"v1.26.0",
"v1.25.0",
"v1.24.0",
"v1.23.0",
"v1.22.0",
"v1.21.0",
"v1.20.0",
"v1.19.0",
"v1.18.0",
"v1.16.0",
"v1.17.0",
"v1.15.0",
"v1.14.0",
"v1.13.0",
"v1.12.0",
"v1.11.0",
"v1.10.0",
"v1.9.0",
"v1.8.0",
"v1.7.0",
"v1.6.0",
"v1.5.0",
"v1.4.0",
"v1.3.0",
"v1.2.0",
"v1.1.0",
"v0.37.0",
"v1.0.0",
"v0.36.0",
"v0.35.0",
"v0.34.0",
"v0.33.0",
"v0.32.0",
"v0.31.0",
"v0.30.0",
"v0.28.0",
"v0.29.0",
"v0.15.0",
"v0.13.0",
"v0.14.0",
"v0.12.0",
"v0.11.0",
"v0.10.0",
"v0.9.1",
"v0.9.0",
"v0.8.0",
"v0.3.0",
"v0.7.0",
"v0.5.0",
"v0.2.1",
"v0.2.2",
"v0.2.0",
"v0.1.0",
"v0.0.2",
"v0.0.1",
"v0.0.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-22115.json"
}
}
],
"modified": "2026-10-24T10:30:52.627063954Z",
"provider": "osv",
"references": [
"https://www.cloudfoundry.org/blog/cve-2021-22115-capi-logs-service-broker-credentials/"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:cloudfoundry:capi-release:*:*:*:*:*:*:*:*"
],
"vendor_product": "cloudfoundry:capi-release",
"extracted_events": [
{
"range": [
{
"fixed": "1.106.0"
}
],
"source": "CPE_RANGE"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2021-22115",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 437748,
"published_at": "2021-04-08T18:15:13.837+00:00"
}