Vulnerability in Cloudfoundry Capi-Release
CVE-2017-8036
An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release version 1.33.0 (only). The original fix for CVE-2017-8033 included in CAPI-release 1.33.0 introduces a regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushing a specially crafted application.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.014 (72.7th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 73rd percentile — 72.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.014 · newest: 0.014 · change: 0.000
Affected products
- Cloudfoundry Capi-Release — versions 1.33.0
- Cloud Controller API Capi-Release Version 1.33.0 Only — versions Cloud Controller API CAPI-release version 1.33.0 only
References
- www.cloudfoundry.org/cve-2017-8036/ (Vendor Advisory)
- www.securityfocus.com/bid/100002 (VDB Entry, Third Party Advisory, vdb-entry)
Frequently asked questions
- What is CVE-2017-8036?
- CVE-2017-8036 is a high-severity vulnerability in Cloudfoundry Capi-Release. CVSS score: 7.8/10. Published 2017-07-24.
- How severe is CVE-2017-8036?
- High severity. CVSS v3 base score is 7.8 out of 10.