Lucene search
GoogleOSV:CVE-2018-15755HistoryOct 12, 2018 - 10:15 p.m.
CVE-2018-15755
2018-10-1222:15:07
Google
osv.dev
3
Cloud Foundry CF Networking Release, versions 2.11.0 prior to 2.16.0, contain an internal api endpoint vulnerable to SQL injection between Diego cells and the policy server. A remote authenticated malicious user with mTLS certs can issue arbitrary SQL queries and gain access to the policy server.
Related
cloudfoundry
cloudfoundry
cve
cve
CVE-2018-15755
2018-10-12 22:15:07
prion
prion
Sql injection
2018-10-12 22:15:00
cvelist
cvelist
CVE-2018-15755 CF networking internal policy server SQL injection
2018-10-02 00:00:00
nvd
nvd
CVE-2018-15755
2018-10-12 22:15:07