Skip to content
OpenAdvisories

Product · Cloud Foundry

CF NFS volume release

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.4
    CVE-2019-11277

    Volume Services is vulnerable to an LDAP injection attack

    Cloud Foundry NFS Volume Service, 1.7.x versions prior to 1.7.11 and 2.x versions prior to 2.3.0, is vulnerable to LDAP injection. A remote authenticated malicious space developer can potentially inject LDAP filters via service instance creation, facilitating…

    Cloud Foundry CF Deployment CF NFS volume release