CVE-2017-4960
1 advisory.
Maven/org.cloudfoundry.identity:cloudfoundry-identity-server CVE-2017-4960: high 7.5, EPSS 1.58%
Cloud Foundry denial of service vulnerability
Action: Upgrade org.cloudfoundry.identity:cloudfoundry-identity-server to 3.9.8 (3.9.x) or 3.12.0 (3.12.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.10.0 | 3.12.0 | - |
| 0 | 3.9.8 | - |
Fixed versions
| 3.12.0 | 3.9.8 |
Sources
- osv: GHSA-hxgw-7539-pv7r
- https://nvd.nist.gov/vuln/detail/CVE-2017-4960
- https://github.com/cloudfoundry/uaa/commit/17a0b86afe1fbd4ed8819267906afa3f76a8dfdc
- https://github.com/cloudfoundry/uaa/commit/5eab756eaf4bb397302f00fbd0273f2470009d38
- https://github.com/cloudfoundry/uaa/commit/78731f8aa37a53385d0194821a5356ab66e2138
- https://github.com/cloudfoundry/uaa
- https://web.archive.org/web/20200227185243/http://www.securityfocus.com/bid/96780
- https://www.cloudfoundry.org/cve-2017-4960
CVE-2017-4960 · published · modified · JSON