← Back

Cloud Foundry Diego

cloud_foundry_diego

Vendor: Pivotal Software • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-1265
2Cloudfoundry
Pivotal Software
2Cf Deployment
Cloud Foundry Diego
Nov 21, 2024
Jun 6, 2018
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Cloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in tar and zip files headers. A remote attacker with CF admin privileges can upload a malicious buildpack that will allow a comp...Show more
Cloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in tar and zip files headers. A remote attacker with CF admin privileges can upload a malicious buildpack that will allow a complete takeover of a Diego Cell VM and access to all apps running on that Diego Cell.Show less