Lucene search
DellCVELIST:CVE-2017-4970HistoryJun 13, 2017 - 6:00 a.m.
CVE-2017-4970
2017-06-1306:00:00
dell
www.cve.org
2
EPSS
0.001
Percentile
40.4%
An issue was discovered in Cloud Foundry Foundation cf-release v255 and Staticfile buildpack versions v1.4.0 - v1.4.3. A regression introduced in the Static file build pack causes the Staticfile.auth configuration to be ignored when the Static file file is not present in the application root. Applications containing a Staticfile.auth file but not a Static file had their basic auth turned off when an operator upgraded the Static file build pack in the foundation to one of the vulnerable versions. Note that Static file applications without a Static file are technically misconfigured, and will not successfully detect unless the Static file build pack is explicitly specified.
CNA Affected
[
{
"product": "Cloud Foundry",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Cloud Foundry"
}
]
}
]References
Related
prion
prion
Design/Logic Flaw
2017-06-13 06:29:00
cve
cve
CVE-2017-4970
2017-06-13 06:29:00
cloudfoundry
cloudfoundry
osv
osv
CVE-2017-4970
2017-06-13 06:29:00
nvd
nvd
CVE-2017-4970
2017-06-13 06:29:00