VULNERABILITY INTELLIGENCE

CVE-2018-15759

CVSS score9.1 CRITICAL
EPSS probability1.75%
CISA KEVNot currently listed
Published2018-11-19
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Description

Pivotal Cloud Foundry On Demand Services SDK, versions prior to 0.24 contain an insecure method of verifying credentials. A remote unauthenticated malicious user may make many requests to the service broker with different credentials, allowing them to infer valid credentials and gain access to perform broker operations.

Weakness classification

  • CWE-307: Improper Restriction of Excessive Authentication Attempts

Primary references