CVE-2017-4972: Blind SQL Injection in UAA | Cloud Foundry

Severity High Vendor Cloud Foundry Foundation Versions Affected cf-release versions prior to v257 UAA release: 2.x versions prior to v2.7.4.14 3.6.x versions prior to v3.6.8 3.9.x versions prior to v3.9.10 Other versions prior to v3.15.0 UAA bosh release uaa-release: 13.x versions prior to v13.12...

PT-2017-16228

Name of the Vulnerable Software and Affected Versions Cloud Foundry versions v247 through v252 UAA stand-alone versions v3.9.0 through v3.11.0 UAA Bosh Release versions v21 through v26 Description An issue was discovered that could subject the UAA OAuth clients to a denial of service attack. This...