CVE-2018-1267

First published: Tue Mar 27 2018(Updated: )

Cloud Foundry Silk CNI plugin, versions prior to 0.2.0, contains an improper access control vulnerability. If the platform is configured with an application security group (ASG) that overlaps with the Silk overlay network, any applications can reach any other application on the network regardless of the configured routing policies.

Credit: security_alert@emc.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/type
• collector/mitre-cve
• source/MITRE
• agent/severity
• agent/weakness
• agent/softwarecombine
• agent/tags
• agent/references
• agent/last-modified-date
• agent/author
• agent/first-publish-date
• agent/event
• agent/description
• vendor/cloudfoundry
• canonical/cloudfoundry silk-release