Code injection

2017-04-2419:59:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.4%

JSON

Pivotal Cloud Foundry 239 and earlier, UAA (aka User Account and Authentication Server) 3.4.1 and earlier, UAA release 12.2 and earlier, PCF (aka Pivotal Cloud Foundry) Elastic Runtime 1.6.x before 1.6.35, and PCF Elastic Runtime 1.7.x before 1.7.13 does not validate if a certificate is expired.

CPENameOperatorVersion
cloud_foundryle239
cloud_foundry_elastic_runtimege1.6.0
cloud_foundry_elastic_runtimelt1.6.35
cloud_foundry_elastic_runtimege1.7.0
cloud_foundry_elastic_runtimelt1.7.13
cloud_foundry_uaale3.4.1
cloud_foundry_uaa-releasele12.2

Name	Operator	Version
cloud_foundry	le	239
cloud_foundry_elastic_runtime	ge	1.6.0
cloud_foundry_elastic_runtime	lt	1.6.35
cloud_foundry_elastic_runtime	ge	1.7.0
cloud_foundry_elastic_runtime	lt	1.7.13
cloud_foundry_uaa	le	3.4.1
cloud_foundry_uaa-release	le	12.2