NetSight
high8.8

CVE-2018-1191

Cloud Foundry Garden-runC, versions prior to 1.11.0, contains an information exposure vulnerability.

Impact

Cloud Foundry Garden-runC, versions prior to 1.11.0, contains an information exposure vulnerability. A user with access to Garden logs may be able to obtain leaked credentials and perform authenticated actions using those credentials.

Affected products

VendorProductAffected versions
CloudfoundryCf-Deployment
before 1.9.0
CloudfoundryGarden-Runc-Release
before 1.11.0

Weakness classification

References