Vulnerabilities (CVE)

Filtered by vendor Cloud Foundry Subscribe
Filtered by product Cf-networking
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-15755 1 Cloud Foundry 1 Cf-networking 2023-12-10 6.5 MEDIUM 8.8 HIGH
Cloud Foundry CF Networking Release, versions 2.11.0 prior to 2.16.0, contain an internal api endpoint vulnerable to SQL injection between Diego cells and the policy server. A remote authenticated malicious user with mTLS certs can issue arbitrary SQL queries and gain access to the policy server.