CVE-2018-15759 — On Demand Services SDK Timing Attack Vulnerability
Pivotal Cloud Foundry On Demand Services SDK, versions prior to 0.24 contain an insecure method of verifying credentials. A remote unauthenticated malicious user may make many r…
Published: 2018-11-19 · CVSS: 9.1 · CVSS 3.0
Pivotal Cloud Foundry On Demand Services SDK, versions prior to 0.24 contain an insecure method of verifying credentials. A remote unauthenticated malicious user may make many requests to the service broker with different credentials, allowing them to infer valid credentials and gain access to perform broker operations.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7