CVE-2017-8035: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.35.0 and cf-release versions after v244 and prior to v268. A carefully crafted CAPI request from a Space Developer can allow them to gain access to files on the Cloud...

PT-2017-18080

Name of the Vulnerable Software and Affected Versions Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.35.0 Cloud Foundry Foundation cf-release versions after v244 and prior to v268 Description An issue in the Cloud Controller API allows a Space Developer to gain access...

PT-2017-18078

Name of the Vulnerable Software and Affected Versions Cloud Foundry Foundation CAPI-release versions prior to v1.35.0 cf-release versions prior to v268 Description A filesystem traversal issue exists in the Cloud Controller API, allowing a space developer to escalate privileges. This can be...

CVE-2017-8036

An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release version 1.33.0 only. The original fix for CVE-2017-8033 included in CAPI-release 1.33.0 introduces a regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushin...

Design/Logic Flaw

An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release version 1.33.0 only. The original fix for CVE-2017-8033 included in CAPI-release 1.33.0 introduces a regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushin...

CVE-2017-8036

CVE-2017-8036 affects Cloud Foundry Foundation Cloud Controller API via a regression introduced by the fix for CVE-2017-8033 in CAPI-release 1.33.0 (only). A space developer can push a crafted app to execute arbitrary code on the Cloud Controller VM. The issue, tied to the same regression path as...

CVE-2017-8036

An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release version 1.33.0 only. The original fix for CVE-2017-8033 included in CAPI-release 1.33.0 introduces a regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushin...

CVE-2017-8036: Undefined Security Weakness

An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release version 1.33.0 only. The original fix for CVE-2017-8033 included in CAPI-release 1.33.0 introduces a regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushin...