2 lines
2.7 KiB
JSON
2 lines
2.7 KiB
JSON
{"affected":[{"affectedData":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"source":"security_alert@emc.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:cloudfoundry:silk-release:*:*:*:*:*:cloudfoundry:*:*","matchCriteriaId":"EADCAA55-B0C7-4C50-9E09-29DB52EA73FC","versionEndExcluding":"0.2.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Cloud Foundry Silk CNI plugin, versions prior to 0.2.0, contains an improper access control vulnerability. If the platform is configured with an application security group (ASG) that overlaps with the Silk overlay network, any applications can reach any other application on the network regardless of the configured routing policies."},{"lang":"es","value":"El plugin Cloud Foundry Silk CNI, en versiones anteriores a la 0.2.0, contiene una vulnerabilidad de control de acceso incorrecto. Si la plataforma está configurada con un grupo de seguridad de aplicaciones (ASG) que se solapa con la red superpuesta de Silk, cualquier aplicación puede alcanzar a otra de la red, independientemente de las políticas de enrutamiento configuradas."}],"id":"CVE-2018-1267","lastModified":"2026-06-17T01:50:52.617","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":6.8,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":8.6,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2018-03-27T16:29:00.467","references":[{"source":"security_alert@emc.com","tags":["Third Party Advisory"],"url":"https://www.cloudfoundry.org/blog/cve-2018-1267/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://www.cloudfoundry.org/blog/cve-2018-1267/"}],"sourceIdentifier":"security_alert@emc.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-732"}],"source":"nvd@nist.gov","type":"Primary"}]}
|