PT-2018-11320 · Cloud Foundry · Cloud Foundry Silk Cni Plugin

Published 2018-03-27 · Updated 2021-09-09 · CVE-2018-1267

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cloud Foundry Silk CNI plugin versions prior to 0.2.0

Description The issue is related to improper access control. If the platform is configured with an application security group (ASG) that overlaps with the Silk overlay network, any applications can reach any other application on the network regardless of the configured routing policies.

Recommendations For versions prior to 0.2.0, update to version 0.2.0 or later to resolve the issue.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2018-1267

Affected Products

Cloud Foundry Silk Cni Plugin

References · 3

• https://osv.dev/vulnerability/CVE-2018-1267 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1267 · Security Note
• https://cloudfoundry.org/blog/cve-2018-1267 · Note