CVE-2018-1267 Cloud Foundry Silk CNI plugin, versions prior to 0.2.0, contains an improper access control vulnerability. If the platform is configured with an application security group (ASG) that overlaps with the...
HighCVSS 8.1
EPSS 0.98%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cloud Foundry Silk CNI plugin, versions prior to 0.2.0, contains an improper access control vulnerability. If the platform is configured with an application security group (ASG) that overlaps with the Silk overlay network, any applications can reach any other application on the network regardless of the configured routing policies.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cloudfoundry silk-release | < 0.2.0 | 0.2.0 |
References
- www.cloudfoundry.org third-party-advisory