CVE-2019-11277— Volume Services is vulnerable to an LDAP injection attack
Quick assessment
Affected
Cloud Foundry CF NFS volume release
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cloud Foundry NFS Volume Service是美国Cloud Foundry基金会的一款NFS（网络文件系统）卷服务。该产品支持配置NFS卷，并将卷绑定到应用程序以进行共享文件访问。 Cloud Foundry NFS Volume Service 1.7.11之前的1.7.x版本和2.3.0之前的2.x版本中存在安全漏洞。远程攻击者可利用该漏洞造成拒绝服务及其他危害。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2019-11277
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Volume Services is vulnerable to an LDAP injection attack
Source: CVE Program / CVE List V5
Vulnerability Description
Cloud Foundry NFS Volume Service, 1.7.x versions prior to 1.7.11 and 2.x versions prior to 2.3.0, is vulnerable to LDAP injection. A remote authenticated malicious space developer can potentially inject LDAP filters via service instance creation, facilitating the malicious space developer to deny service or perform a dictionary attack.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
LDAP查询中使用的特殊元素转义处理不恰当(LDAP注入)
Source: CVE Program / CVE List V5
Vulnerability Title
Cloud Foundry NFS Volume Service 注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cloud Foundry NFS Volume Service是美国Cloud Foundry基金会的一款NFS（网络文件系统）卷服务。该产品支持配置NFS卷，并将卷绑定到应用程序以进行共享文件访问。 Cloud Foundry NFS Volume Service 1.7.11之前的1.7.x版本和2.3.0之前的2.x版本中存在安全漏洞。远程攻击者可利用该漏洞造成拒绝服务及其他危害。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cloud Foundry | CF NFS volume release | 1.7 ~ v1.7.11 | - |
|
| Cloud Foundry | CF Deployment | All ~ v11.1.0 | - |
|
II. Public POCs for CVE-2019-11277
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-11277
请登录查看更多情报信息。
Security Blog Posts for CVE-2019-11277 (1)
-
https://www.cloudfoundry.org/blog/cve-2019-11277 x_refsource_CONFIRM
IV. Related Vulnerabilities
Same vendor: Cloud Foundry
-
CVE-2026-41012
BOSH vSphere CPI Improper Cert Validation -
CVE-2026-59335
Case-Sensitive Authorization Check Bypass via Identity Zone -
CVE-2026-41005
UAA accepts SAML Encrypted Assertions authentication bypass -
CVE-2026-22734
Cloud Foundry UAA SAML 2.0 Signature Bypass -
CVE-2025-22246
CVE-2025-22246 – UAA Private Key Exposure
Same weakness: CWE-90
-
CVE-2026-94053
Apache MINA SSHD: LDAP injection in sshd-ldap -
CVE-2026-101145
Eleveo Call Recording Software User Management userAddAction -
CVE-2026-90979
Apache Karaf: LDAP filter injection in JAAS LDAP login modul -
CVE-2026-49469
GLPI: LDAP filter injection in user import feature -
CVE-2026-67223
RabbitMQ: LDAP DN injection via unescaped substitution
V. Comments for CVE-2019-11277
No comments yet