Information disclosure in Pivotal_software Cloud_foundry_cf-deployment
CVE-2018-1192
In Cloud Foundry Foundation cf-release versions prior to v285; cf-deployment versions prior to v1.7; UAA 4.5.x versions prior to 4.5.5, 4.8.x versions prior to 4.8.3, and 4.7.x versions prior to 4.7.4; and UAA-release 45.7.x versions prior…
Vulnerability class: Information Disclosure
EPSS: 0.010 (59.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Pivotal_software Cloud_foundry_cf-deployment
- Pivotal_software Cloud_foundry_cf-release
- Pivotal_software Cloud_foundry_uaa
- Pivotal_software Cloud_foundry_uaa-release — versions 45.7, 52.7, 53.3
- N/a Cloud Foundry Foundation Cf-release Versions Prior To V285; Cf-deployment V1.7; Uaa 4.5.x 4.5.5, 4.8.x 4.8.3, And 4.7.x 4.7.4; Uaa-release 45.7.x 45.7, 52.7.x 52.7, 53.3.x 53.3 — versions Cloud Foundry Foundation cf-release versions prior to v285; cf-deployment versions prior to v1.7; UAA 4.5.x versions prior to 4.5.5, 4.8.x versions prior to 4.8.3, and 4.7.x versions prior to 4.7.4; and UAA-release 45.7.x versions prior to 45.7, 52.7.x versions prior to 52.7, and 53.3.x versions prior to 53.3
Weakness classification (CWE)
References
- security_alert@emc.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2018-1192?
- CVE-2018-1192 is a high-severity vulnerability in Pivotal_software Cloud_foundry_cf-deployment, classified under Information Disclosure. CVSS score: 8.8/10. Published 2018-02-01.
- How severe is CVE-2018-1192?
- High severity. CVSS v3 base score is 8.8 out of 10.