CVE-2018-1276

Windows 2012R2 stemcells, versions prior to 1200.17, contain an information exposure vulnerability on vSphere

published May 17, 2018

CVSS
—
EPSS
1%
Percentile
63.6
In the wild
Unconfirmed
What it is

Windows 2012R2 stemcells, versions prior to 1200.17, contain an information exposure vulnerability on vSphere. A remote user with the ability to push apps can execute crafted commands to read the IaaS metadata from the VM, which may contain BOSH credentials.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01045 · 63.6th percentile
Published
2018-05-17T20:00Z
EPSS history
Timeline
  • 17 MAY 20:00Z
    Windows 2012R2 stemcells, versions prior to 1200.17, contain an information exposure vulnerability on vSphere
    cvelistv5