Lucene search
Veracode Vulnerability DatabaseVERACODE:5940HistoryMar 20, 2018 - 2:05 a.m.
File Traversal
2018-03-2002:05:19
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.002 Low
EPSS
Percentile
55.9%
github.com/cloudfoundry-attic/garden-linux is vulnerable to file traversal attacks. The garden-linux nstar executable allows attackers to read files within the host system that the BOSH-created vcap user has permission to read. This can be done by staging an application on Cloud Foundry using Diego or Garden and using a custom buildpack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/cloudfoundry-attic/garden-linux | eq | HEAD |
References
Related
cve
cve
CVE-2015-5350
2018-03-19 13:29:00
cloudfoundry
cloudfoundry
CVE-2015-5350 Garden Nstar vulnerability | Cloud Foundry
2015-12-15 00:00:00
prion
prion
Code injection
2018-03-19 13:29:00
cvelist
cvelist
CVE-2015-5350
2017-01-02 00:00:00
nvd
nvd
CVE-2015-5350
2018-03-19 13:29:00