CVE-2018-1268

State: Published
Severity: Not scored
Published: Jun 6, 2018
Updated: Sep 17, 2024
Reserved: Dec 6, 2017

Description

Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99.1 or 101.x prior to 101.9 or 102.x prior to 102.2, does not validate app GUID structure in requests. A remote authenticated malicious user knowing the GUID of an app may construct malicious requests to read from or write to the logs of that app.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LoggregatorCloud Foundry	89.x to before 89.5Affected 96.x to before 96.1Affected 99.x to before 99.1Affected 101.x to before 101.9Affected 102.x to before 102.2Affected

References

https://www.cloudfoundry.org/blog/cve-2018-1268

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.