Design/Logic Flaw

2017-06-1306:29:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.4%

JSON

An issue was discovered in Pivotal PCF Elastic Runtime 1.8.x versions prior to 1.8.29 and 1.9.x versions prior to 1.9.7. Pivotal Cloud Foundry deployments using the Pivotal Account application are vulnerable to a flaw which allows an authorized user to take over the account of another user, causing account lockout and potential escalation of privileges.

CPENameOperatorVersion
cloud_foundry_elastic_runtimeeq1.8.28
cloud_foundry_elastic_runtimeeq1.8.0
cloud_foundry_elastic_runtimeeq1.8.13
cloud_foundry_elastic_runtimeeq1.8.14
cloud_foundry_elastic_runtimeeq1.8.15
cloud_foundry_elastic_runtimeeq1.8.11
cloud_foundry_elastic_runtimeeq1.8.21
cloud_foundry_elastic_runtimeeq1.8.6
cloud_foundry_elastic_runtimeeq1.8.1
cloud_foundry_elastic_runtimeeq1.8.24

Name	Operator	Version
cloud_foundry_elastic_runtime	eq	1.8.28
cloud_foundry_elastic_runtime	eq	1.8.0
cloud_foundry_elastic_runtime	eq	1.8.13
cloud_foundry_elastic_runtime	eq	1.8.14
cloud_foundry_elastic_runtime	eq	1.8.15
cloud_foundry_elastic_runtime	eq	1.8.11
cloud_foundry_elastic_runtime	eq	1.8.21
cloud_foundry_elastic_runtime	eq	1.8.6
cloud_foundry_elastic_runtime	eq	1.8.1
cloud_foundry_elastic_runtime	eq	1.8.24