CVE-2018-15796 | BDVDB-2026-109253 Detail
Cloud Foundrybits-service-release
Description#
Cloud Foundry Bits Service Release, versions prior to 2.14.0, uses an insecure hashing algorithm to sign URLs. A remote malicious user may obtain a signed URL and extract the signing key, allowing them complete read and write access to the the Bits Service storage.
Impact#
Per CVSS v3.0: confidentiality impact high, integrity impact high, availability impact none. Attack vector: network.
Weaknesses#
No weakness recorded in the source data.
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.