QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2017-4972

Back to search

CVE-2017-4972

Published: Jun 13, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions prior to v3.6.8, 3.9.x versions prior to v3.9.10, and other versions prior to v3.15.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.12, 24.x versions prior to v24.7, and other versions prior to v30. An attacker can use a blind SQL injection attack to query the contents of the UAA database.

VendorProductVersions

n/a

Cloud Foundry UAA

affected
Cloud Foundry UAA

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now