← Back

Cf Networking

cf-networking

Vendor: Cloud Foundry • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-15755
1Cloud Foundry
1Cf Networking
Nov 21, 2024
Oct 12, 2018
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Cloud Foundry CF Networking Release, versions 2.11.0 prior to 2.16.0, contain an internal api endpoint vulnerable to SQL injection between Diego cells and the policy server. A remote authenticated malicious user with mTL...Show more
Cloud Foundry CF Networking Release, versions 2.11.0 prior to 2.16.0, contain an internal api endpoint vulnerable to SQL injection between Diego cells and the policy server. A remote authenticated malicious user with mTLS certs can issue arbitrary SQL queries and gain access to the policy server.Show less