Steeltoe.Management.Endpoint versions prior to 4.2.0 and Steeltoe.Management.EndpointCore versions prior to 3.4.0 default all actuator endpoints to 'EndpointPermissions.Restricted', which corresponds to Cloud Foundry's 'read_basic_data' permission. However, sensitive endpoints like heap dump, environment, and thread dump do not elevate their required permissions to 'EndpointPermissions.Full', which maps to the stricter 'read_sensitive_data' permission. This improper privilege management means that users with lower trust roles (e.g., Space Auditors) may access sensitive actuator data that should be restricted. The vulnerability is addressed by upgrading to versions 4.2.0 (Steeltoe.Management.Endpoint) and 3.4.0 (Steeltoe.Management.EndpointCore), which enforce the correct permission levels. Alternatively, users can explicitly configure the sensitive endpoints to require full permissions or selectively register only necessary actuators to reduce exposure.

Users with lower privilege roles in Cloud Foundry environments may gain unauthorized read access to sensitive actuator endpoints such as heap dumps, environment variables, and thread dumps. This exposure could lead to leakage of sensitive application or system information. The vulnerability does not impact integrity or availability but has a high confidentiality impact. There are no known exploits in the wild at this time.

A fix is available by upgrading to Steeltoe.Management.Endpoint version 4.2.0 or later and Steeltoe.Management.EndpointCore version 3.4.0 or later. If immediate upgrade is not possible, explicitly set 'RequiredPermissions = EndpointPermissions.Full' in the options for HeapDumpEndpointOptions, EnvironmentEndpointOptions, and ThreadDumpEndpointOptions. Additionally, consider registering only the required actuators individually instead of using 'AddAllActuators()' to avoid exposing sensitive endpoints unnecessarily.