Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2018/10/12 9:0 p.m.26 views

CVE-2018-15755 CF networking internal policy server SQL injection

Cloud Foundry CF Networking Release, versions 2.11.0 prior to 2.16.0, contain an internal api endpoint vulnerable to SQL injection between Diego cells and the policy server. A remote authenticated malicious user with mTLS certs can issue arbitrary SQL queries and gain access to the policy server...

6.6CVSS8.9AI score0.01282EPSS
SaveExploits0References1
Rows per page
Query Builder