CVE-2018-1231

8.8 highEPSS 1.0%

High (8.8) in pivotal software bosh cli. EPSS 1.0% chance of exploitation in the next 30 days.

Cloud Foundry BOSH CLI, versions prior to v3.0.1, contains an improper access control vulnerability. A user with access to an instance using the BOSH CLI can access the BOSH CLI configuration file and use its contents to perform authenticated requests to BOSH.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-732
Published: 2018-03-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

pivotal_software:bosh_cli

References

https://www.cloudfoundry.org/blog/cve-2018-1231/
https://www.cloudfoundry.org/blog/cve-2018-1231/

Check your stack JSON