CVE-2017-4992

Critical

Published: 13/06/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261 and UAA versions prior to specified versions, allowing privilege escalation through arbitrary password resets with user invitations.

Risk Assessment

Privilege escalation may lead to unauthorized access to the system, posing a serious threat to the organization's data security.

Recommendation

It is recommended to upgrade to the latest versions of cf-release and UAA to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x versions prior to v3.6.11, 3.9.x versions prior to v3.9.13, and other versions prior to v4.2.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.15, 24.x versions prior to v24.10, 30.x versions prior to 30.3, and other versions prior to v37. There is privilege escalation (arbitrary password reset) with user invitations.