CVE-2018-1267

Cloud Foundry Silk CNI plugin, versions prior to 0.2.0, contains an improper access control vulnerability

published March 27, 2018

CVSS
—
EPSS
1%
Percentile
61.9
In the wild
Unconfirmed
What it is

Cloud Foundry Silk CNI plugin, versions prior to 0.2.0, contains an improper access control vulnerability. If the platform is configured with an application security group (ASG) that overlaps with the Silk overlay network, any applications can reach any other application on the network regardless of the configured routing policies.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00981 · 61.9th percentile
Published
2018-03-27T16:00Z
EPSS history
Timeline
  • 27 MAR 16:00Z
    Cloud Foundry Silk CNI plugin, versions prior to 0.2.0, contains an improper access control vulnerability
    cvelistv5