← Back

CVE-2018-11756

nvd nist
Published: Jul 23, 2018Modified: Nov 21, 2024

JSON object

Loading...
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

In PHP Runtime for Apache OpenWhisk, a Docker action inheriting one of the Docker tags openwhisk/action-php-v7.2:1.0.0 or openwhisk/action-php-v7.1:1.0.1 (or earlier) may allow an attacker to replace the user function inside the container if the user code is vulnerable to code exploitation.

Affected (2)

Products: Apache: Openwhisk
Apache
1 product
Openwhisk
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Openwhisk
Before 1.0.1
Running on/withPlatform Versions
Php
Php
Version 7.2.0
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Openwhisk
Before 1.0.2
Running on/withPlatform Versions
Php
Php
Version 7.1.0

References (7)

Source: security@apache.org
Third Party AdvisoryVDB Entry
Source: security@apache.org
PatchThird Party Advisory
Source: security@apache.org
Source: nvd@nist.gov
MitigationTechnical DescriptionThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.