Description
An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x versions prior to v3.6.11, 3.9.x versions prior to v3.9.13, and other versions prior to v4.2.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.15, 24.x versions prior to v24.10, 30.x versions prior to 30.3, and other versions prior to v37. There is privilege escalation (arbitrary password reset) with user invitations.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2022-4331 | An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x versions prior to v3.6.11, 3.9.x versions prior to v3.9.13, and other versions prior to v4.2.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.15, 24.x versions prior to v24.10, 30.x versions prior to 30.3, and other versions prior to v37. There is privilege escalation (arbitrary password reset) with user invitations. |
Github GHSA |
GHSA-jcmh-x32v-7mgf | Cloud Foundry UAA privilege escalation with user invitations |
References
| Link | Providers |
|---|---|
| https://www.cloudfoundry.org/cve-2017-4992/ |
|
History
No history.
Status: PUBLISHED
Assigner: dell
Published:
Updated: 2024-08-05T14:47:43.659Z
Reserved: 2016-12-29T00:00:00.000Z
Link: CVE-2017-4992
No data.
Status : Modified
Published: 2017-06-13T06:29:00.770
Modified: 2026-05-13T00:24:29.033
Link: CVE-2017-4992
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD
Github GHSA