Design/Logic Flaw

2018-03-1918:29:00

PRIOn knowledge base

www.prio-n.com

8.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

In Windows Stemcells versions prior to 1200.14, apps running inside containers in Windows on Google Cloud Platform are able to access the metadata endpoint. A malicious developer could use this access to gain privileged credentials.

CPENameOperatorVersion
windows_stemcellslt1200.14

CPE	Name	Operator	Version
	windows_stemcells	lt	1200.14

References

www.cloudfoundry.org/blog/cve-2018-1197/