Lucene search
DellCVELIST:CVE-2017-8034HistoryJul 17, 2017 - 2:00 p.m.
CVE-2017-8034
2017-07-1714:00:00
dell
www.cve.org
2
EPSS
0.001
Percentile
42.8%
The Cloud Controller and Router in Cloud Foundry (CAPI-release capi versions prior to v1.32.0, Routing-release versions prior to v0.159.0, CF-release versions prior to v267) do not validate the issuer on JSON Web Tokens (JWTs) from UAA. With certain multi-zone UAA configurations, zone administrators are able to escalate their privileges.
CNA Affected
[
{
"product": "Cloud Foundry",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Cloud Foundry"
}
]
}
]References
Related
nvd
nvd
CVE-2017-8034
2017-07-17 14:29:01
cve
cve
CVE-2017-8034
2017-07-17 14:29:01
prion
prion
Code injection
2017-07-17 14:29:00
cloudfoundry
cloudfoundry
osv
osv
CVE-2017-8034
2017-07-17 14:29:01