PT-2018-10904 · Cloud Foundry · Garden-Runc

Published 2018-03-29 · Updated 2019-10-09 · CVE-2018-1191

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cloud Foundry Garden-runC versions prior to 1.11.0

Description The issue allows a user with access to Garden logs to potentially obtain leaked credentials. This could enable the user to perform authenticated actions using the leaked credentials.

Recommendations For versions prior to 1.11.0, update to version 1.11.0 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

CWE-215

Related Identifiers

CVE-2018-1191

Affected Products

Garden-Runc

References · 3

• https://osv.dev/vulnerability/CVE-2018-1191 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1191 · Security Note
• https://cloudfoundry.org/blog/cve-2018-1191 · Vendor Advisory