CVE-2018-15800 | BDVDB-2026-110320 Detail
Cloud FoundryBits Service Release
Description#
Cloud Foundry Bits Service, versions prior to 2.18.0, includes an information disclosure vulnerability. A remote malicious user may execute a timing attack to brute-force the signing key, allowing them complete read and write access to the the Bits Service storage.
Impact#
Per CVSS v3.0: confidentiality impact high, integrity impact high, availability impact none. Attack vector: network.
Weaknesses#
No weakness recorded in the source data.
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.