RSS   Vulnerabilities for 'Capi-release'   RSS

2017-10-03
 
CVE-2017-8048

CWE-noinfo
 

 
In Cloud Foundry capi-release versions 1.33.0 and later, prior to 1.42.0 and cf-release versions 268 and later, prior to 274, the original fix for CVE-2017-8033 introduces an API regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushing a specially crafted application. NOTE: 274 resolves the vulnerability but has a serious bug that is fixed in 275.

 

 >>> Vendor: Pivotal 22 Products
Tc server
Operations manager
Spring framework
Rabbitmq
Cloud foundry elastic runtime
Cloud foundry
Cf-release
Capi-release
Bosh stemcell
Spring security oauth
Routing-release
Spring web flow
Pcf tile generator
UAA
Elastic runtime
Uaa-release
Uaa bosh
Spring-flex
Cloud foundry php buildpack
Tc runtimes
Reactor netty
Vmware harbor registry


Copyright 2024, cxsecurity.com

 

Back to Top