An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions prior to v3.6.8, 3.9.x versions prior to v3.9.10, and other versions prior to v3.15.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.12, 24.x versions prior to v24.7, and other versions prior to v30. A vulnerability has been identified with the groups endpoint in UAA allowing users to elevate their privileges.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://www.cloudfoundry.org/cve-2017-4973/ |
History
No history.
MITRE
Status: PUBLISHED
Assigner: dell
Published: 2017-06-13T06:00:00
Updated: 2024-08-05T14:47:44.126Z
Reserved: 2016-12-29T00:00:00
Link: CVE-2017-4973
Vulnrichment
No data.
NVD
Status : Modified
Published: 2017-06-13T06:29:00.660
Modified: 2024-11-21T03:26:47.023
Link: CVE-2017-4973
Redhat
No data.