cvedb.io
CVE-2018-1267
HIGH · CVSS 8.1
EPSS exploitation probability: 0%
Published 2018-03-27T16:29:00.467 · Last modified 2026-06-17T01:50:52.617

Summary

Cloud Foundry Silk CNI plugin, versions prior to 0.2.0, contains an improper access control vulnerability. If the platform is configured with an application security group (ASG) that overlaps with the Silk overlay network, any applications can reach any other application on the network regardless of the configured routing policies.

Affected products

cloudfoundry — silk-release

Does this affect you?

Add your gear to cvedb and we'll alert you only when cloudfoundry ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.