VDB
CVE-2018-15755
CVE-2018-15755
PUBLISHED
CVSS 6.599999904632568 MEDIUM
Cloud Foundry CF Networking Release, versions 2.11.0 prior to 2.16.0, contain an internal api endpoint vulnerable to SQL injection between Diego cells and the policy server. A remote authenticated malicious user with mTLS certs can issue arbitrary SQL queries and gain access to the policy server.
EPSS 1.28% · 67.3th percentile
Risk Scores
CVSS 3.0
6.599999904632568
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
1.28%
67.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cloud_foundry | cf-networking | 2.11.0 |
| Cloud Foundry | CF Networking Release | 2.11.0 |
Timeline
- Oct 12, 2018 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- May 2, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Nov 7, 2022 EPSS Score
- Jan 8, 2023 EPSS Score