CVE-2017-4992

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x versions prior to v3.6.11, 3.9.x versions prior to v3.9.13, and other versions prior to v4.2.0; and UAA bosh release uaa-release 13.x versions prior to v13.15,...

CVE-2017-4963

An issue was discovered in Cloud Foundry Foundation Cloud Foundry release v252 and earlier versions, UAA stand-alone release v2.0.0 - v2.7.4.12 & v3.0.0 - v3.11.0, and UAA bosh release v26 & earlier versions. UAA is vulnerable to session fixation when configured to authenticate against external...

CVE-2017-4973

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions prior to v3.6.8, 3.9.x versions prior to v3.9.10, and other versions prior to v3.15.0; and UAA bosh release uaa-release 13.x versions prior to v13.12,...

CVE-2017-4973

Cloud Foundry UAA Privilege Escalation (CVE-2017-4973) affects cf-release prior to v257 and UAA releases before the specified upgrades (2.x before v2.7.4.14, 3.6.x before v3.6.8, 3.9.x before v3.9.10, and other versions before v3.15.0), as well as UAA bosh releases (13.x before v13.12, 24.x befor...

PT-2017-16236

Name of the Vulnerable Software and Affected Versions Cloud Foundry Foundation cf-release versions prior to v257 UAA release 2.x versions prior to v2.7.4.14 UAA release 3.6.x versions prior to v3.6.8 UAA release 3.9.x versions prior to v3.9.10 UAA release versions prior to v3.15.0 UAA bosh releas...

PT-2017-16237

Name of the Vulnerable Software and Affected Versions Cloud Foundry Foundation cf-release versions prior to v258 UAA release 2.x versions prior to v2.7.4.15 UAA release 3.6.x versions prior to v3.6.9 UAA release 3.9.x versions prior to v3.9.11 UAA release versions prior to v3.16.0 UAA bosh releas...

PT-2017-16251

Name of the Vulnerable Software and Affected Versions Cloud Foundry Foundation cf-release versions prior to v263 UAA release 2.x versions prior to v2.7.4.18 UAA release 3.6.x versions prior to v3.6.12 UAA release 3.9.x versions prior to v3.9.14 UAA release versions prior to v4.3.0 UAA bosh releas...

PT-2017-16230

Name of the Vulnerable Software and Affected Versions Cloud Foundry versions prior to v252 UAA stand-alone versions 2.0.0 through 2.7.4.12 UAA stand-alone versions 3.0.0 through 3.11.0 UAA bosh versions prior to v26 Description An issue was discovered in Cloud Foundry and UAA, where UAA is...

CVE-2017-4973: Improper Privilege Management

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions prior to v3.6.8, 3.9.x versions prior to v3.9.10, and other versions prior to v3.15.0; and UAA bosh release uaa-release 13.x versions prior to v13.12,...

CVE-2017-4991: Improper Privilege Management

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v260; UAA release 2.x versions prior to v2.7.4.16, 3.6.x versions prior to v3.6.10, 3.9.x versions prior to v3.9.12, and other versions prior to v3.17.0; and UAA bosh release uaa-release 13.x versions prior to v13.14...

CVE-2017-4994: Improper Input Validation

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v263; UAA release 2.x versions prior to v2.7.4.18, 3.6.x versions prior to v3.6.12, 3.9.x versions prior to v3.9.14, and other versions prior to v4.3.0; and UAA bosh release uaa-release 13.x versions prior to v13.16,...

CVE-2017-4972: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions prior to v3.6.8, 3.9.x versions prior to v3.9.10, and other versions prior to v3.15.0; and UAA bosh release uaa-release 13.x versions prior to v13.12,...

PT-2017-16250

Name of the Vulnerable Software and Affected Versions Cloud Foundry Foundation cf-release versions prior to v261 UAA release 2.x versions prior to v2.7.4.17 UAA release 3.6.x versions prior to v3.6.11 UAA release 3.9.x versions prior to v3.9.13 UAA release versions prior to v4.2.0 UAA bosh releas...

CVE-2017-4963: Session Fixation

An issue was discovered in Cloud Foundry Foundation Cloud Foundry release v252 and earlier versions, UAA stand-alone release v2.0.0 - v2.7.4.12 & v3.0.0 - v3.11.0, and UAA bosh release v26 & earlier versions. UAA is vulnerable to session fixation when configured to authenticate against external...

PT-2017-16249

Name of the Vulnerable Software and Affected Versions Cloud Foundry Foundation cf-release versions prior to v260 UAA release 2.x versions prior to v2.7.4.16 UAA release 3.6.x versions prior to v3.6.10 UAA release 3.9.x versions prior to v3.9.12 UAA release versions prior to v3.17.0 UAA bosh relea...

CVE-2017-4974: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v258; UAA release 2.x versions prior to v2.7.4.15, 3.6.x versions prior to v3.6.9, 3.9.x versions prior to v3.9.11, and other versions prior to v3.16.0; and UAA bosh release uaa-release 13.x versions prior to v13.13,...

PT-2017-16235

Name of the Vulnerable Software and Affected Versions Cloud Foundry Foundation cf-release versions prior to v257 UAA release 2.x versions prior to v2.7.4.14 UAA release 3.6.x versions prior to v3.6.8 UAA release 3.9.x versions prior to v3.9.10 UAA release versions prior to v3.15.0 UAA bosh releas...

CVE-2017-4992: Improper Privilege Management

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x versions prior to v3.6.11, 3.9.x versions prior to v3.9.13, and other versions prior to v4.2.0; and UAA bosh release uaa-release 13.x versions prior to v13.15,...

CVE-2017-8032: UAA Identity Zone Admin Privilege Escalation | Cloud Foundry

Severity High Vendor Cloud Foundry Foundation Versions Affected Please see additional information in the Mitigation section to determine if your foundation is affected. cf-release versions prior to v264 UAA release: All versions of UAA v2.x.x 3.6.x versions prior to v3.6.13 3.9.x versions prior t...

CVE-2017-4994: Forwarded Headers in UAA | Cloud Foundry

Severity High Vendor Cloud Foundry Foundation Versions Affected cf-release versions prior to v263 UAA release: 2.x versions prior to v2.7.4.18 3.6.x versions prior to v3.6.12 3.9.x versions prior to v3.9.14 Other versions prior to v4.3.0 UAA bosh release uaa-release: 13.x versions prior to v13.16...