CVE-2018-15759
Pivotal Cloud Foundry On Demand Services SDK, versions prior to 0.24 contain an insecure method of verifying credentials. A remote unauthenticated mal...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Pivotal Cloud Foundry On Demand Services SDK, versions prior to 0.24 contain an insecure method of verifying credentials. A remote unauthenticated malicious user may make many requests to the service broker with different credentials, allowing them to infer valid credentials and gain access to perform broker operations.
参照URL
- advisory securityfocus.com
- advisory pivotal.io