Cloud Foundry Cf Networking vulnerabilities

1 vulnerability

Known vulnerabilities in Cloud Foundry Cf Networking, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2018-15755cloud foundrycf networking release+1
EPSS score
1.28%
Cloud Foundry CF Networking Release, versions 2.11.0 prior to 2.16.0, contain an internal api endpoint vulnerable to SQL injection between Diego cells and the policy server. A remote authenticated malicious user with mTLS certs can issue arbitrary SQL queries and gain access to the policy server.