What is CVE-2018-1267?

CVE-2018-1267 is a high-severity vulnerability in Cloudfoundry Silk-Release, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 8.1/10. Published 2018-03-27.

How severe is CVE-2018-1267?

High severity. CVSS v3 base score is 8.1 out of 10.

Vulnerability in Cloudfoundry Silk-Release

CVE-2018-1267

Cloud Foundry Silk CNI plugin, versions prior to 0.2.0, contains an improper access control vulnerability. If the platform is configured with an application security group (ASG) that overlaps with the Silk overlay network, any applications can reach any other application on the network regardless of the configured routing policies.

EPSS: 0.010 (58.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Cloudfoundry Silk-release
N/a — versions n/a

Weakness classification (CWE)

CWE-732 — Incorrect Permission Assignment for Critical Resource

References

security_alert@emc.com (x_refsource_CONFIRM, Third Party Advisory)

Frequently asked questions

What is CVE-2018-1267?: CVE-2018-1267 is a high-severity vulnerability in Cloudfoundry Silk-Release, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 8.1/10. Published 2018-03-27.
How severe is CVE-2018-1267?: High severity. CVSS v3 base score is 8.1 out of 10.