CVE-2017-4991
1 advisory.
Maven/org.cloudfoundry.identity:cloudfoundry-identity-server CVE-2017-4991: high 7.2
Cloud Foundry UAA password reset vulnerability
Action: Upgrade org.cloudfoundry.identity:cloudfoundry-identity-server to 2.7.4.16 (2.7.x), 3.6.10 (3.6.x), 3.9.12 (3.9.x) or 3.17.0 (3.17.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.7.4.16 | - |
| 3.0.0 | 3.6.10 | - |
| 3.7.0 | 3.9.12 | - |
| 3.10.0 | 3.17.0 | - |
Fixed versions
| 2.7.4.16 | 3.6.10 | 3.9.12 | 3.17.0 |
Sources
- osv: GHSA-cgrg-x34r-78f3
- https://nvd.nist.gov/vuln/detail/CVE-2017-4991
- https://github.com/cloudfoundry/uaa/commit/2ca35f1723e039aa7d2318134b05d02e40072a18
- https://github.com/cloudfoundry/uaa/commit/ba23bcf109704ab2eae519b705d7b2a75e023553
- https://github.com/cloudfoundry/uaa/commit/bbf6751bc0d87c4a3aaf21b54e26ce328ab998b3
- https://github.com/cloudfoundry/uaa/commit/eb3f86054489039e11eabd54a8ec9a46c22abfc8
- https://github.com/cloudfoundry/uaa
- https://www.cloudfoundry.org/cve-2017-4991
CVE-2017-4991 · published · modified · JSON