Lucene search
PRIOn knowledge basePRION:CVE-2018-1265HistoryJun 06, 2018 - 8:29 p.m.
Design/Logic Flaw
2018-06-0620:29:00
PRIOn knowledge base
www.prio-n.com
2
Cloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in tar and zip files headers. A remote attacker with CF admin privileges can upload a malicious buildpack that will allow a complete takeover of a Diego Cell VM and access to all apps running on that Diego Cell.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cf-deployment | lt | 1.37.0 | |
| cloud_foundry_diego | lt | 2.8.0 |
References
Related
cve
cve
CVE-2018-1265
2018-06-06 20:29:00
nvd
nvd
CVE-2018-1265
2018-06-06 20:29:00
cloudfoundry
cloudfoundry
ibm
ibm
osv
osv
CVE-2018-1265
2018-06-06 20:29:00
cvelist
cvelist
CVE-2018-1265
2018-06-05 00:00:00