Lucene search

[email protected]NVD:CVE-2017-4960

HistoryMar 10, 2017 - 1:59 a.m.

CVE-2017-4960

2017-03-1001:59:00

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

40.6%

JSON

An issue was discovered in Cloud Foundry release v247 through v252, UAA stand-alone release v3.9.0 through v3.11.0, and UAA Bosh Release v21 through v26. There is a potential to subject the UAA OAuth clients to a denial of service attack.

Affected configurations

Nvd

Node

cloudfoundrycloud_foundry_uaa_boshMatch21

cloudfoundrycloud_foundry_uaa_boshMatch22

cloudfoundrycloud_foundry_uaa_boshMatch23

cloudfoundrycloud_foundry_uaa_boshMatch24

cloudfoundrycloud_foundry_uaa_boshMatch24.1

cloudfoundrycloud_foundry_uaa_boshMatch24.2

cloudfoundrycloud_foundry_uaa_boshMatch24.3

cloudfoundrycloud_foundry_uaa_boshMatch24.4

cloudfoundrycloud_foundry_uaa_boshMatch24.5

cloudfoundrycloud_foundry_uaa_boshMatch24.6

cloudfoundrycloud_foundry_uaa_boshMatch25

cloudfoundrycloud_foundry_uaa_boshMatch26

pivotal_softwarecloud_foundryMatch247.0

pivotal_softwarecloud_foundryMatch248.0

pivotal_softwarecloud_foundryMatch249.0

pivotal_softwarecloud_foundryMatch250.0

pivotal_softwarecloud_foundryMatch251.0

pivotal_softwarecloud_foundryMatch252.0

pivotal_softwarecloud_foundry_uaaMatch3.9.0

pivotal_softwarecloud_foundry_uaaMatch3.9.1

pivotal_softwarecloud_foundry_uaaMatch3.9.2

pivotal_softwarecloud_foundry_uaaMatch3.9.3

pivotal_softwarecloud_foundry_uaaMatch3.9.4

pivotal_softwarecloud_foundry_uaaMatch3.9.5

pivotal_softwarecloud_foundry_uaaMatch3.9.6

pivotal_softwarecloud_foundry_uaaMatch3.9.7

pivotal_softwarecloud_foundry_uaaMatch3.9.8

pivotal_softwarecloud_foundry_uaaMatch3.10.0

pivotal_softwarecloud_foundry_uaaMatch3.11.0

VendorProductVersionCPE
cloudfoundrycloud_foundry_uaa_bosh21cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:21:*:*:*:*:*:*:*
cloudfoundrycloud_foundry_uaa_bosh22cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:22:*:*:*:*:*:*:*
cloudfoundrycloud_foundry_uaa_bosh23cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:23:*:*:*:*:*:*:*
cloudfoundrycloud_foundry_uaa_bosh24cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24:*:*:*:*:*:*:*
cloudfoundrycloud_foundry_uaa_bosh24.1cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.1:*:*:*:*:*:*:*
cloudfoundrycloud_foundry_uaa_bosh24.2cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.2:*:*:*:*:*:*:*
cloudfoundrycloud_foundry_uaa_bosh24.3cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.3:*:*:*:*:*:*:*
cloudfoundrycloud_foundry_uaa_bosh24.4cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.4:*:*:*:*:*:*:*
cloudfoundrycloud_foundry_uaa_bosh24.5cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.5:*:*:*:*:*:*:*
cloudfoundrycloud_foundry_uaa_bosh24.6cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cloudfoundry	cloud_foundry_uaa_bosh	21	cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:21:::::::*
cloudfoundry	cloud_foundry_uaa_bosh	22	cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:22:::::::*
cloudfoundry	cloud_foundry_uaa_bosh	23	cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:23:::::::*
cloudfoundry	cloud_foundry_uaa_bosh	24	cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24:::::::*
cloudfoundry	cloud_foundry_uaa_bosh	24.1	cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.1:::::::*
cloudfoundry	cloud_foundry_uaa_bosh	24.2	cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.2:::::::*
cloudfoundry	cloud_foundry_uaa_bosh	24.3	cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.3:::::::*
cloudfoundry	cloud_foundry_uaa_bosh	24.4	cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.4:::::::*
cloudfoundry	cloud_foundry_uaa_bosh	24.5	cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.5:::::::*
cloudfoundry	cloud_foundry_uaa_bosh	24.6	cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.6:::::::*