Lucene search
PRIOn knowledge basePRION:CVE-2018-15755HistoryOct 12, 2018 - 10:15 p.m.
Sql injection
2018-10-1222:15:00
PRIOn knowledge base
www.prio-n.com
2
Cloud Foundry CF Networking Release, versions 2.11.0 prior to 2.16.0, contain an internal api endpoint vulnerable to SQL injection between Diego cells and the policy server. A remote authenticated malicious user with mTLS certs can issue arbitrary SQL queries and gain access to the policy server.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cf-networking | ge | 2.11.0 | |
| cf-networking | lt | 2.16.0 |
Related
osv
osv
CVE-2018-15755
2018-10-12 22:15:07
cloudfoundry
cloudfoundry
cve
cve
CVE-2018-15755
2018-10-12 22:15:07
cvelist
cvelist
CVE-2018-15755 CF networking internal policy server SQL injection
2018-10-02 00:00:00
nvd
nvd
CVE-2018-15755
2018-10-12 22:15:07