CVE-2018-15800

Published: Dec 10, 2018Modified: Nov 21, 2024

6.8

Vector

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Exploitability: 1.6 / Impact: 5.2

Source: NVD

Description

Cloud Foundry Bits Service, versions prior to 2.18.0, includes an information disclosure vulnerability. A remote malicious user may execute a timing attack to brute-force the signing key, allowing them complete read and write access to the the Bits Service storage.

Affected (1)

Products: Cloud Foundry: Bits Service

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cloud Foundry Bits Service	Before 2.18.0

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://www.cloudfoundry.org/blog/cve-2018-15800

Source: security_alert@emc.com

MitigationVendor Advisory

https://www.cloudfoundry.org/blog/cve-2018-15800

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationVendor Advisory

Timeline

No history available yet.