Cloudfoundry Nfs Volume Release vulnerabilities

1 known vulnerability affecting cloudfoundry/nfs_volume_release.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2019-11277HIGHCVSS 8.1≥ 1.7.0, < 1.7.11≥ 2.0.0, < 2.3.02019-09-23

CVE-2019-11277 [HIGH] CWE-90 CVE-2019-11277: Cloud Foundry NFS Volume Service, 1.7.x versions prior to 1.7.11 and 2.x versions prior to 2.3.0, is Cloud Foundry NFS Volume Service, 1.7.x versions prior to 1.7.11 and 2.x versions prior to 2.3.0, is vulnerable to LDAP injection. A remote authenticated malicious space developer can potentially inject LDAP filters via service instance creation, facilitating the malicious space developer to deny service or perform a dictionary attack.