PT-2018-10904 · Cloud Foundry · Garden-Runc

Publicado 2018-03-29 · Atualizado 2019-10-09 · CVE-2018-1191

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cloud Foundry Garden-runC versions prior to 1.11.0

Description The issue allows a user with access to Garden logs to potentially obtain leaked credentials. This could enable the user to perform authenticated actions using the leaked credentials.

Recommendations For versions prior to 1.11.0, update to version 1.11.0 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

CWE-215

Identificadores relacionados

CVE-2018-1191

Produtos afetados

Garden-Runc

Referências · 3

• https://osv.dev/vulnerability/CVE-2018-1191 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1191 · Nota de Segurança
• https://cloudfoundry.org/blog/cve-2018-1191 · Aviso do Fabricante