CVE-2018-1276

2018-05-1720:00:00

dell

www.cve.org

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

40.6%

JSON

Windows 2012R2 stemcells, versions prior to 1200.17, contain an information exposure vulnerability on vSphere. A remote user with the ability to push apps can execute crafted commands to read the IaaS metadata from the VM, which may contain BOSH credentials.

CNA Affected

[
  {
    "product": "Windows2012R2 stemcell",
    "vendor": "Cloud Foundry",
    "versions": [
      {
        "status": "affected",
        "version": "versions prior to 1200.17"
      }
    ]
  }
]

References

www.cloudfoundry.org/blog/cve-2018-1276/