PT-2017-16250 · Cloud Foundry Foundation · Cf-Release+1

Published 2017-06-13 · Updated 2022-06-03 · CVE-2017-4992

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cloud Foundry Foundation cf-release versions prior to v261 UAA release 2.x versions prior to v2.7.4.17 UAA release 3.6.x versions prior to v3.6.11 UAA release 3.9.x versions prior to v3.9.13 UAA release versions prior to v4.2.0 UAA bosh release (uaa-release) 13.x versions prior to v13.15 UAA bosh release (uaa-release) 24.x versions prior to v24.10 UAA bosh release (uaa-release) 30.x versions prior to 30.3 UAA bosh release (uaa-release) versions prior to v37

Description The issue allows for privilege escalation through arbitrary password reset with user invitations. This can be exploited to gain unauthorized access to accounts.

Recommendations For Cloud Foundry Foundation cf-release versions prior to v261, update to version v261 or later. For UAA release 2.x versions prior to v2.7.4.17, update to version v2.7.4.17 or later. For UAA release 3.6.x versions prior to v3.6.11, update to version v3.6.11 or later. For UAA release 3.9.x versions prior to v3.9.13, update to version v3.9.13 or later. For UAA release versions prior to v4.2.0, update to version v4.2.0 or later. For UAA bosh release (uaa-release) 13.x versions prior to v13.15, update to version v13.15 or later. For UAA bosh release (uaa-release) 24.x versions prior to v24.10, update to version v24.10 or later. For UAA bosh release (uaa-release) 30.x versions prior to 30.3, update to version 30.3 or later. For UAA bosh release (uaa-release) versions prior to v37, update to version v37 or later.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2017-4992

GHSA-JCMH-X32V-7MGF

Affected Products

Uaa

Cf-Release

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2017-4992 · Security Note
• https://cloudfoundry.org/cve-2017-4992 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-4992 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-jcmh-x32v-7mgf · Vendor Advisory
• https://github.com/cloudfoundry/uaa · Note
• https://github.com/cloudfoundry/uaa/commit/3ce42a4c75828cb58287c3c7495dde3f5261f12c · Note
• https://github.com/cloudfoundry/uaa/commit/4f942064d85454a4bcc4da04cd482d114816c14a · Note
• https://github.com/cloudfoundry/uaa/commit/96a294013c0c9a13ef32afc49d2b759f5107dc49 · Note
• https://github.com/cloudfoundry/uaa/commit/1c9c6dd88266cfa7d333e5d8be1031fa31c5c939 · Note
• https://t.me/cvenotify/18765 · Telegram Post