Vulnerability in Cloudfoundry Cf-release
CVE-2017-8031
An issue was discovered in Cloud Foundry Foundation cf-release (all versions prior to v279) and UAA (30.x versions prior to 30.6, 45.x versions prior to 45.4, 52.x versions prior to 52.1). In some cases, the UAA allows an authenticated use…
EPSS: 0.004 (62.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Cloudfoundry Cf-release
- Cloudfoundry Uaa-release — versions 52
- N/a Cf-release And Uaa Cf-release: All Versions Prior To V279, Uaa: 30.x 30.6, 45.x 45.4, 52.x 52.1 — versions cf-release and UAA cf-release: All versions prior to v279, UAA: 30.x versions prior to 30.6, 45.x versions prior to 45.4, 52.x versions prior to 52.1
References
- security_alert@emc.com (x_refsource_CONFIRM, Third Party Advisory, Issue Tracking)
- security_alert@emc.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2017-8031?
- CVE-2017-8031 is a medium-severity vulnerability in Cloudfoundry Cf-release. CVSS score: 5.3/10. Published 2017-11-27.
- How severe is CVE-2017-8031?
- Medium severity. CVSS v3 base score is 5.3 out of 10.