Skip to content
OpenAdvisories

Product · Cloud Foundry

CF Networking Release

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.6
    CVE-2018-15755

    CF networking internal policy server SQL injection

    Cloud Foundry CF Networking Release, versions 2.11.0 prior to 2.16.0, contain an internal api endpoint vulnerable to SQL injection between Diego cells and the policy server. A remote authenticated malicious user with mTLS certs can issue arbitrary SQL queries…

    Cloud Foundry CF Networking Release