{"action":"Upgrade org.cloudfoundry.identity:cloudfoundry-identity-server to 2.7.4.17 (2.7.x), 3.6.11 (3.6.x), 3.9.13 (3.9.x) or 4.2.0 (4.2.x) or later.","affected":[{"fixed":"2.7.4.17","introduced":"2.0.0"},{"fixed":"3.6.11","introduced":"3.0.0"},{"fixed":"3.9.13","introduced":"3.7.0"},{"fixed":"4.2.0","introduced":"3.10.0"}],"component":"org.cloudfoundry.identity:cloudfoundry-identity-server","cve_ids":["CVE-2017-4992"],"ecosystem":"Maven","epss":0.01167,"exploited":false,"fixed_versions":["2.7.4.17","3.6.11","3.9.13","4.2.0"],"ghsa_id":"GHSA-jcmh-x32v-7mgf","id":"tcs_01M5N92KK039M6PA411TAD7CCA","modified_at":"2024-03-01T20:26:39.636567Z","published_at":"2022-05-13T01:07:25Z","references":["https://osv.dev/vulnerability/GHSA-jcmh-x32v-7mgf","https://nvd.nist.gov/vuln/detail/CVE-2017-4992","https://github.com/cloudfoundry/uaa/commit/1c9c6dd88266cfa7d333e5d8be1031fa31c5c939","https://github.com/cloudfoundry/uaa/commit/3ce42a4c75828cb58287c3c7495dde3f5261f12c","https://github.com/cloudfoundry/uaa/commit/4f942064d85454a4bcc4da04cd482d114816c14a","https://github.com/cloudfoundry/uaa/commit/96a294013c0c9a13ef32afc49d2b759f5107dc49","https://github.com/cloudfoundry/uaa","https://www.cloudfoundry.org/cve-2017-4992"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-jcmh-x32v-7mgf","url":"https://osv.dev/vulnerability/GHSA-jcmh-x32v-7mgf"}],"summary":"Cloud Foundry UAA privilege escalation with user invitations"}