QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2017-4973

Back to search

CVE-2017-4973

Published: Jun 13, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions prior to v3.6.8, 3.9.x versions prior to v3.9.10, and other versions prior to v3.15.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.12, 24.x versions prior to v24.7, and other versions prior to v30. A vulnerability has been identified with the groups endpoint in UAA allowing users to elevate their privileges.

VendorProductVersions

n/a

Cloud Foundry UAA

affected
Cloud Foundry UAA

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now