CVE-2018-1197: High severity Pivotal Software Windows Stemcells vulnerability
In Windows Stemcells versions prior to 1200.14, apps running inside containers in Windows on Google Cloud Platform are able to access the metadata endpoint. A malicious developer could use this access to gain privileged credentials.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-1197?
CVE-2018-1197 has a high severity rating due to the potential for unauthorized access to privileged credentials.
How do I fix CVE-2018-1197?
To fix CVE-2018-1197, upgrade to Windows Stemcells version 1200.14 or later.
What environments are affected by CVE-2018-1197?
CVE-2018-1197 affects apps running in containers on Windows within the Google Cloud Platform environment.
Who is affected by the CVE-2018-1197 vulnerability?
Developers using vulnerable versions of Windows Stemcells on Google Cloud Platform are at risk from CVE-2018-1197.
What can a malicious developer do with CVE-2018-1197?
A malicious developer could exploit CVE-2018-1197 to access sensitive metadata and gain privileged credentials.