PT-2018-10928 · Microsoft · Windows Stemcells

Publicado 2018-03-19 · Atualizado 2019-10-03 · CVE-2018-1197

Positive Technologies (AI Summary)

CVSS v3.1

8.5

Alta

Vetor base

AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Stemcells versions prior to 1200.14

Description The issue allows apps running inside containers in Windows on Google Cloud Platform to access the metadata endpoint. A malicious developer could use this access to gain privileged credentials.

Recommendations For Windows Stemcells versions prior to 1200.14, update to version 1200.14 or later to resolve the issue.

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2018-1197

Produtos afetados

Windows Stemcells

Referências · 3

• https://cloudfoundry.org/blog/cve-2018-1197 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1197 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-1197 · Aviso do Fabricante