未評価
Cloud Foundry Silk CNI plugin, versions prior to 0.2.0, contains an improper access control vulnerability. If the platform is configured with an appli...
CVE-2018-1267
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Cloud Foundry Silk CNI plugin, versions prior to 0.2.0, contains an improper access control vulnerability. If the platform is configured with an application security group (ASG) that overlaps with the Silk overlay network, any applications can reach any other application on the network regardless of the configured routing policies.
参照URL
- advisory cloudfoundry.org