CVE-2017-8038

2017-11-2710:29:00

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.2%

JSON

In Cloud Foundry Foundation Credhub-release version 1.1.0, access control lists (ACLs) enforce whether an authenticated user can perform an operation on a credential. For installations using ACLs, the ACL was bypassed for the CredHub interpolate endpoint, allowing authenticated applications to view any credential within the CredHub installation.

CPENameOperatorVersion
credhub-releaseeq0.5.1
credhub-releaseeq1.1.0-rc.1
credhub-releaseeq0.1.0
credhub-releaseeq0.8.0
credhub-releaseeq1
credhub-releaseeq1.1.0
credhub-releaseeq0.2.0
credhub-releaseeq0.6.1
credhub-releaseeq0.4.0
credhub-releaseeq1.0.0

Name	Operator	Version
credhub-release	eq	0.5.1
credhub-release	eq	1.1.0-rc.1
credhub-release	eq	0.1.0
credhub-release	eq	0.8.0
credhub-release	eq	1
credhub-release	eq	1.1.0
credhub-release	eq	0.2.0
credhub-release	eq	0.6.1
credhub-release	eq	0.4.0
credhub-release	eq	1.0.0