What is CVE-2018-1266?

CVE-2018-1266 is a high-severity vulnerability in Cloudfoundry Capi-release, classified under Path Traversal. CVSS score: 8.1/10. Published 2018-03-27.

How severe is CVE-2018-1266?

High severity. CVSS v3 base score is 8.1 out of 10.

Path Traversal in Cloudfoundry Capi-release

CVE-2018-1266

Cloud Foundry Cloud Controller, versions prior to 1.52.0, contains information disclosure and path traversal vulnerabilities. An authenticated malicious user can predict the location of application blobs and leverage path traversal to crea…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.011 (63.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N.

Affected products

Cloudfoundry Capi-release
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal
CWE-330 — Use of Insufficiently Random Values

References

security_alert@emc.com (x_refsource_CONFIRM, Third Party Advisory)

Frequently asked questions

What is CVE-2018-1266?: CVE-2018-1266 is a high-severity vulnerability in Cloudfoundry Capi-release, classified under Path Traversal. CVSS score: 8.1/10. Published 2018-03-27.
How severe is CVE-2018-1266?: High severity. CVSS v3 base score is 8.1 out of 10.