PT-2017-16229 · Cloud Foundry Foundation · Bosh Release

Publicado 2017-06-13 · Atualizado 2019-10-03 · CVE-2017-4961

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cloud Foundry Foundation BOSH Release versions prior to 261.3 Cloud Foundry Foundation BOSH Release 260.x versions

Description An issue allows an authenticated Director user to potentially escalate their privileges on the Director VM by providing a malicious checksum.

Recommendations For Cloud Foundry Foundation BOSH Release versions prior to 261.3, update to version 261.3 or later. For Cloud Foundry Foundation BOSH Release 260.x versions, update to version 261.3 or later.

Correção

Enumeração de Fraquezas

CWE-354

Identificadores relacionados

CVE-2017-4961

Produtos afetados

Bosh Release

Referências · 3

• https://osv.dev/vulnerability/CVE-2017-4961 · Aviso do Fabricante
• https://cloudfoundry.org/cve-2017-4961 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-4961 · Nota de Segurança