CVE-2018-1276

🗓️ 17 May 2018 20:00:00Reported by dellType

Windows 2012R2 stemcells, versions prior to 1200.17, contain an information exposure vulnerability on vSphere. A remote user with the ability to push apps can execute crafted commands to read the IaaS metadata from the VM, which may contain BOSH credentials

Reporter	Title	Published	Views	Family All 7
Cloud Foundry	CVE-2018-1276: Windows2012R2 stemcell exposes IaaS metadata on vSphere \| Cloud Foundry	16 May 201800:00	–	cloudfoundry
CNVD	Cloud Foundry Windows 2012R2 stemcells Information Disclosure Vulnerability	13 Jun 201800:00	–	cnvd
Cvelist	CVE-2018-1276	17 May 201820:00	–	cvelist
EUVD	EUVD-2018-11895	7 Oct 202500:30	–	euvd
NVD	CVE-2018-1276	17 May 201820:29	–	nvd
OSV	CVE-2018-1276	17 May 201820:29	–	osv
Prion	Information disclosure	17 May 201820:29	–	prion

NVD

Vulners

Node

pivotal_software windows_stemcellsRange<1200.17

[
  {
    "product": "Windows2012R2 stemcell",
    "vendor": "Cloud Foundry",
    "versions": [
      {
        "status": "affected",
        "version": "versions prior to 1200.17"
      }
    ]
  }
]

Source	Link
cloudfoundry	www.cloudfoundry.org/blog/cve-2018-1276/

21 Nov 2024 03:59Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24

CVSS 36.5

EPSS0.00224

CWE-200