VULNERABILITY INTELLIGENCE

CVE-2018-1267

CVSS score8.1 HIGH
EPSS probability0.98%
CISA KEVNot currently listed
Published2018-03-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Cloud Foundry Silk CNI plugin, versions prior to 0.2.0, contains an improper access control vulnerability. If the platform is configured with an application security group (ASG) that overlaps with the Silk overlay network, any applications can reach any other application on the network regardless of the configured routing policies.

Weakness classification

  • CWE-732: Incorrect Permission Assignment for Critical Resource

Primary references