CVE-2018-15755 CF networking internal policy server SQL injection
Authenticated attackers with mTLS certificates can execute arbitrary SQL queries on the Cloud Foundry policy server, leading to data exposure and privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-15755?
CVE-2018-15755 is a medium-severity SQL injection vulnerability in Cloud Foundry CF Networking Release, published on 12 Oct 2018. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Cloud Foundry CF Networking Release, versions 2.11.0 prior to 2.16.0, contain an internal api endpoint vulnerable to SQL injection between Diego cells and the policy server. A remote authenticated malicious user with mTLS certs can issue arbitrary SQL queries and gain access to the policy server.
Weakness: CWE-89
Which versions are affected by CVE-2018-15755?
It affects 1 product.
Products include Cloud Foundry Cf-Networking.
How do I fix CVE-2018-15755?
No fix has been published for CVE-2018-15755 yet. Limit exposure of the affected software until one is available.
Use parameterised queries everywhere and never build SQL by joining strings. Upgrade affected software first; a web application firewall only buys time. More about SQL injection.
Is CVE-2018-15755 being exploited?
There is no known exploitation of CVE-2018-15755 in the wild and no public exploit code.
Sources
Also known as GHSA-m392-rj9c-4gwh.