PT-2018-11358
CVE-2018-1276
·
تاريخ النشر
2018-05-17
·
تاريخ التحديث
2018-06-20
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Windows 2012R2 stemcells versions prior to 1200.17
Description
The issue allows a remote user with the ability to push apps to execute crafted commands, reading the IaaS metadata from the VM. This metadata may contain BOSH credentials.
Recommendations
For Windows 2012R2 stemcells versions prior to 1200.17, update to version 1200.17 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾