CVE-2018-15755

ALTO 8.8CVE-2018-15755 · Published 12/10/2018 · updated 17/06/2026

En resumen

CVE-2018-15755 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a cf-networking (cloud foundry).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.3%, mayor que el 70.1% de las vulnerabilidades.
Solución: actualizar a 2.16.0 o posterior.

Package	Affected versions	Patched versions
cf-networking cloud_foundry	`≥ 2.11.0, < 2.16.0`	`2.16.0`

Description

Cloud Foundry CF Networking Release, versions 2.11.0 prior to 2.16.0, contain an internal api endpoint vulnerable to SQL injection between Diego cells and the policy server. A remote authenticated malicious user with mTLS certs can issue arbitrary SQL queries and gain access to the policy server.

References

cloudfoundry.org/blog/cve-2018-15755 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free