CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.6. It may be remotely exploitable. It involves a SQL injection risk.
CVE
CVE-2018-15755
Severity
MEDIUM
CVSS
6.6
EPSS
1.28%
Original NVD Description
Cloud Foundry CF Networking Release, versions 2.11.0 prior to 2.16.0, contain an internal api endpoint vulnerable to SQL injection between Diego cells and the policy server. A remote authenticated malicious user with mTLS certs can issue arbitrary SQL queries and gain access to the policy server.
Related CVEs
Other vulnerabilities affecting the same vendor(s)