An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions. In certain cases an authenticated Director user can provide a malicious checksum that could allow them to escalate their privileges on the Director VM, aka “BOSH Director Shell Injection Vulnerabilities.”
[
{
"product": "Cloud Foundry Foundation BOSH Release",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Cloud Foundry Foundation BOSH Release"
}
]
}
]