1. Home
  2. CVE Database
  3. CVE-2018-1197
HIGH · 8.5

CVE-2018-1197

In Windows Stemcells versions prior to 1200.14, apps running inside containers in Windows on Google Cloud Platform are able to access the metadata endpoint. A malicious developer could use this access...

Vulnerability Description

In Windows Stemcells versions prior to 1200.14, apps running inside containers in Windows on Google Cloud Platform are able to access the metadata endpoint. A malicious developer could use this access to gain privileged credentials.

CVSS Score

8.5

HIGH

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
Pivotal SoftwareWindows Stemcells< 1200.14

Related Weaknesses (CWE)

CWE-732

References

FAQ

What is CVE-2018-1197?

CVE-2018-1197 is a vulnerability with a CVSS score of 8.5 (HIGH). In Windows Stemcells versions prior to 1200.14, apps running inside containers in Windows on Google Cloud Platform are able to access the metadata endpoint. A malicious developer could use this access...

How severe is CVE-2018-1197?

CVE-2018-1197 has been rated HIGH with a CVSS base score of 8.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-1197?

Check the references section above for vendor advisories and patch information. Affected products include: Pivotal Software Windows Stemcells.