← CVE Intelligence

CVE-2019-11277

Volume Services is vulnerable to an LDAP injection attack PUBLISHED

Description (CNA)

Cloud Foundry NFS Volume Service, 1.7.x versions prior to 1.7.11 and 2.x versions prior to 2.3.0, is vulnerable to LDAP injection. A remote authenticated malicious space developer can potentially inject LDAP filters via service instance creation, facilitating the malicious space developer to deny service or perform a dictionary attack.

Affected (CNA)

Vendor / productVersions
Cloud Foundry / CF NFS volume releaseaffected 1.7 before v1.7.11; affected 2.3 before v2.3.0
Cloud Foundry / CF Deploymentaffected All before v11.1.0

CWE

CWE-90

References

ADP enrichment

CVE

No English description supplied.