high8.5
CVE-2018-1197
In Windows Stemcells versions prior to 1200.14, apps running inside containers in Windows on Google Cloud Platform are able to access the metadata endpoint.
Impact
In Windows Stemcells versions prior to 1200.14, apps running inside containers in Windows on Google Cloud Platform are able to access the metadata endpoint. A malicious developer could use this access to gain privileged credentials.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pivotal Software | Windows Stemcells | before 1200.14 |