PT-2017-16250 · Cloud Foundry Foundation · Cf-Release+1

Publicado 2017-06-13 · Atualizado 2022-06-03 · CVE-2017-4992

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cloud Foundry Foundation cf-release versions prior to v261 UAA release 2.x versions prior to v2.7.4.17 UAA release 3.6.x versions prior to v3.6.11 UAA release 3.9.x versions prior to v3.9.13 UAA release versions prior to v4.2.0 UAA bosh release (uaa-release) 13.x versions prior to v13.15 UAA bosh release (uaa-release) 24.x versions prior to v24.10 UAA bosh release (uaa-release) 30.x versions prior to 30.3 UAA bosh release (uaa-release) versions prior to v37

Description The issue allows for privilege escalation through arbitrary password reset with user invitations. This can be exploited to gain unauthorized access to accounts.

Recommendations For Cloud Foundry Foundation cf-release versions prior to v261, update to version v261 or later. For UAA release 2.x versions prior to v2.7.4.17, update to version v2.7.4.17 or later. For UAA release 3.6.x versions prior to v3.6.11, update to version v3.6.11 or later. For UAA release 3.9.x versions prior to v3.9.13, update to version v3.9.13 or later. For UAA release versions prior to v4.2.0, update to version v4.2.0 or later. For UAA bosh release (uaa-release) 13.x versions prior to v13.15, update to version v13.15 or later. For UAA bosh release (uaa-release) 24.x versions prior to v24.10, update to version v24.10 or later. For UAA bosh release (uaa-release) 30.x versions prior to 30.3, update to version 30.3 or later. For UAA bosh release (uaa-release) versions prior to v37, update to version v37 or later.

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2017-4992

GHSA-JCMH-X32V-7MGF

Produtos afetados

Uaa

Cf-Release

Referências · 10

• https://github.com/cloudfoundry/uaa · Nota
• https://github.com/cloudfoundry/uaa/commit/3ce42a4c75828cb58287c3c7495dde3f5261f12c · Nota
• https://github.com/cloudfoundry/uaa/commit/4f942064d85454a4bcc4da04cd482d114816c14a · Nota
• https://github.com/cloudfoundry/uaa/commit/96a294013c0c9a13ef32afc49d2b759f5107dc49 · Nota
• https://github.com/cloudfoundry/uaa/commit/1c9c6dd88266cfa7d333e5d8be1031fa31c5c939 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-4992 · Nota de Segurança
• https://cloudfoundry.org/cve-2017-4992 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-4992 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-jcmh-x32v-7mgf · Aviso do Fabricante
• https://t.me/cvenotify/18765 · Publicação no Telegram