CVE-2017-8037

CVE-2017-8037 affects Cloud Foundry: CAPI-release v1.6.0+ up to < v1.38.0 and cf-release v244+ up to

CVE-2017-8035

CVE-2017-8035 targets the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions after v1.6.0 and before v1.35.0 (and cf-release after v244 and before v268). A carefully crafted CAPI request from a Space Developer can gain access to files on the Cloud Controller VM for that instal...