CVE-2018-1197 Information disclosure in Windows Stemcells
Malicious developers can access metadata endpoints in Windows containers to steal privileged credentials, requiring an upgrade to secure the environment.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-1197?
CVE-2018-1197 is a high-severity vulnerability in Dell EMC Windows Stemcells, published on 19 Mar 2018. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
In Windows Stemcells versions prior to 1200.14, apps running inside containers in Windows on Google Cloud Platform are able to access the metadata endpoint. A malicious developer could use this access to gain privileged credentials.
Weakness: CWE-732
Which versions are affected by CVE-2018-1197?
It affects 1 product.
Products include Pivotal Software Windows Stemcells.
How do I fix CVE-2018-1197?
No fix has been published for CVE-2018-1197 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-1197 being exploited?
There is no known exploitation of CVE-2018-1197 in the wild and no public exploit code.
Other vulnerabilities in Dell EMC Windows Stemcells
Sources
Also known as GHSA-5mjc-xm4w-8h63.