Lucene search
Veracode Vulnerability DatabaseVERACODE:6623HistoryJun 07, 2018 - 7:42 a.m.
Improper Validation Of App GUID
2018-06-0707:42:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
0.001 Low
EPSS
Percentile
44.5%
github.com/cloudfoundry/loggregator is vulnerable to improper validation of app GUID. The vulnerability exists due to the improper check on appID in Wrap of log_access_middleware.go, allowing remotely authenticated users with the knowledge of an existing appID to read and write to the application’s log.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/cloudfoundry/loggregator | eq | HEAD | |
| github.com/cloudfoundry/loggregator | le | 102.1 |
Related
prion
prion
Code injection
2018-06-06 20:29:00
cve
cve
CVE-2018-1268
2018-06-06 20:29:00
nvd
nvd
CVE-2018-1268
2018-06-06 20:29:00
cvelist
cvelist
CVE-2018-1268
2018-06-05 00:00:00
cloudfoundry
cloudfoundry
CVE-2018-1268: Loggregator lacks app GUID validation | Cloud Foundry
2018-06-05 00:00:00
osv
osv
CVE-2018-1268
2018-06-06 20:29:00