CVE-2018-1191

Cloud Foundry Garden-runC, versions prior to 1.11.0, contains an information exposure vulnerability. A user with access to Garden logs may be able to obtain leaked credentials and perform authenticated actions using those credentials.

Score

CVSS 3.0 8.8 High

Status

Modified - security_alert@emc.com

Published

2018-03-29

Last modified

2024-09-17

Weaknesses

CWE-200, CWE-215

Affected products

• Garden-runc (Cloud Foundry)
• Cf-deployment (Cloudfoundry)
• Garden-runc-release (Cloudfoundry)

References

• https://www.cloudfoundry.org/blog/cve-2018-1191/