Lucene search
DellCVELIST:CVE-2017-8037HistoryAug 21, 2017 - 10:00 p.m.
CVE-2017-8037
2017-08-2122:00:00
dell
www.cve.org
0.002 Low
EPSS
Percentile
56.1%
In Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.38.0 and cf-release versions after v244 and prior to v270, there is an incomplete fix for CVE-2017-8035. If you took steps to remediate CVE-2017-8035 you should also upgrade to fix this CVE. A carefully crafted CAPI request from a Space Developer can allow them to gain access to files on the Cloud Controller VM for that installation, aka an Information Leak / Disclosure.
CNA Affected
[
{
"product": "Cloud Foundry",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Cloud Foundry"
}
]
}
]Related
cve
cve
CVE-2017-8037
2017-08-21 22:29:00
CVE-2017-8035
2017-07-25 04:29:00
osv
osv
CVE-2017-8037
2017-08-21 22:29:00
CVE-2017-8035
2017-07-25 04:29:00
cloudfoundry
cloudfoundry
prion
prion
Design/Logic Flaw
2017-08-21 22:29:00
Design/Logic Flaw
2017-07-25 04:29:00
nvd
nvd
CVE-2017-8037
2017-08-21 22:29:00
CVE-2017-8035
2017-07-25 04:29:00
cvelist
cvelist
CVE-2017-8035
2017-07-25 04:00:00