Strix
26.1K

CVE-2018-1267

HIGHCVSS 8.1/10EPSS 0.99%

Last modified

CVE-2018-1267 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. Cloud Foundry Silk CNI plugin, versions prior to 0.2.0, contains an improper access control vulnerability. If the platform is configured with an application security group (ASG) that overlaps with the Silk overlay network, any applications can reach any other application on the network regardless of the configured routing policies.. EPSS estimates a 0.99% chance of exploitation in the next 30 days.

Description

Cloud Foundry Silk CNI plugin, versions prior to 0.2.0, contains an improper access control vulnerability. If the platform is configured with an application security group (ASG) that overlaps with the Silk overlay network, any applications can reach any other application on the network regardless of the configured routing policies.

Metrics

CVSS 3.1
8.1/10

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.99%

58.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
CloudfoundrySilk-Release< 0.2.0

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2018-1267?
Cloud Foundry Silk CNI plugin, versions prior to 0.2.0, contains an improper access control vulnerability. If the platform is configured with an application security group (ASG) that overlaps with the Silk overlay network, any applications can reach any other application on the network regardless of the configured routing policies.
How severe is CVE-2018-1267?
CVE-2018-1267 has a CVSS score of 8.1/10 (HIGH severity). The EPSS model estimates a 0.99% probability of exploitation in the next 30 days.
How do I fix CVE-2018-1267?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-1267?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST