CVE:CVE-2018-1191
CNNVD:CNNVD-201803-1115
Cloud Foundry Garden-runC是美国Cloud Foundry基金会的一套基于Garden的容器系统。
Cloud Foundry Garden-runC 1.11.0之前版本中存在信息泄露漏洞。攻击者可利用该漏洞获取证书并执行已认证的操作。
solution:Upgrade cloudfoundry cf-deployment to a higher version than 1.9.0,and avoid the version (,1.9.0); Upgrade cloudfoundry garden-runc-release to a higher version than 1.11.0,and avoid the version (,1.11.0)