high8.8
CVE-2018-1231
Cloud Foundry BOSH CLI, versions prior to v3.0.1, contains an improper access control vulnerability.
Impact
Cloud Foundry BOSH CLI, versions prior to v3.0.1, contains an improper access control vulnerability. A user with access to an instance using the BOSH CLI can access the BOSH CLI configuration file and use its contents to perform authenticated requests to BOSH.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pivotal Software | Bosh Cli | before 3.0.1 |