An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions prior to v3.6.8, 3.9.x versions prior to v3.9.10, and other versions prior to v3.15.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.12, 24.x versions prior to v24.7, and other versions prior to v30. A vulnerability has been identified with the groups endpoint in UAA allowing users to elevate their privileges.
References
Link | Resource |
---|---|
https://www.cloudfoundry.org/cve-2017-4973/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2017-06-13 06:29
Updated : 2024-02-28 16:04
NVD link : CVE-2017-4973
Mitre link : CVE-2017-4973
CVE.ORG link : CVE-2017-4973
JSON object : View
Products Affected
pivotal_software
- cloud_foundry_uaa
- cloud_foundry_cf
cloudfoundry
- cloud_foundry_uaa_bosh
CWE
CWE-269
Improper Privilege Management