CVE-2018-1265

Cloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in tar and zip files headers. A remote attacker with CF admin privileges can upload a malicious buildpack that will allow a complete takeover of a Diego Cell VM and access to all apps running on that Diego Cell.

Score

CVSS 3.0 7.2 High

Status

Modified - security_alert@emc.com

Published

2018-06-06

Last modified

2024-09-17

Weaknesses

CWE-434

Affected products

• Diego (Cloud Foundry)
• Cf-deployment (Cloudfoundry)
• Cloud Foundry Diego (Pivotal Software)

References

• https://www.cloudfoundry.org/blog/cve-2018-1265/