CVE-2017-8032
1 advisory.
Maven/org.cloudfoundry.identity:cloudfoundry-identity-server CVE-2017-8032: medium 6.6
Cloud Foundry UAA Identity Zone Admin Privilege Escalation
Action: Upgrade org.cloudfoundry.identity:cloudfoundry-identity-server to 3.6.13 (3.6.x), 3.9.15 (3.9.x), 3.20.0 (3.20.x) or 4.4.0 (4.4.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.6.13 | - |
| 3.7.0 | 3.9.15 | - |
| 3.10.0 | 3.20.0 | - |
| 4.0.0 | 4.4.0 | - |
Fixed versions
| 3.6.13 | 3.9.15 | 3.20.0 | 4.4.0 |
Sources
- osv: GHSA-9frw-wmvq-5rrc
- https://nvd.nist.gov/vuln/detail/CVE-2017-8032
- https://github.com/cloudfoundry/uaa/commit/2c10c43f04cf31e9f8f496cd218bfc773dfc149
- https://github.com/cloudfoundry/uaa/commit/4e4d653edb6b8f68e12b7c415e07e068b1574b8
- https://github.com/cloudfoundry/uaa/commit/aa308c463eaec96704198c2686306c9fc42f126e
- https://github.com/cloudfoundry/uaa/commit/ea8c0ce7740a5d756d9f11964f6a6b4df54cc3b2
- https://github.com/cloudfoundry/uaa
- https://www.cloudfoundry.org/cve-2017-8032
CVE-2017-8032 · published · modified · JSON