CVE-2018-1276

State: Published
Severity: Not scored
Published: May 17, 2018
Updated: Sep 16, 2024
Reserved: Dec 6, 2017

Description

Windows 2012R2 stemcells, versions prior to 1200.17, contain an information exposure vulnerability on vSphere. A remote user with the ability to push apps can execute crafted commands to read the IaaS metadata from the VM, which may contain BOSH credentials.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Windows2012R2 stemcellCloud Foundry	versions prior to 1200.17Affected

References

https://www.cloudfoundry.org/blog/cve-2018-1276/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.