{"action":"Upgrade org.cloudfoundry.identity:cloudfoundry-identity-server to 2.7.4.14 (2.7.x), 3.6.8 (3.6.x), 3.9.10 (3.9.x) or 3.15.0 (3.15.x) or later.","affected":[{"fixed":"2.7.4.14","introduced":"2.0.0"},{"fixed":"3.6.8","introduced":"3.0.0"},{"fixed":"3.9.10","introduced":"3.7.0"},{"fixed":"3.15.0","introduced":"3.10.0"}],"component":"org.cloudfoundry.identity:cloudfoundry-identity-server","cve_ids":["CVE-2017-4973"],"ecosystem":"Maven","epss":0.01068,"exploited":false,"fixed_versions":["2.7.4.14","3.6.8","3.9.10","3.15.0"],"ghsa_id":"GHSA-pgjc-gc7g-p2c6","id":"tcs_01M5N97DB3ZMC2YF332SGNBCM3","modified_at":"2024-03-01T20:26:39.396788Z","published_at":"2022-05-13T01:07:25Z","references":["https://osv.dev/vulnerability/GHSA-pgjc-gc7g-p2c6","https://nvd.nist.gov/vuln/detail/CVE-2017-4973","https://github.com/cloudfoundry/uaa/commit/0762cc768592abc4fb1c6afd9974ea6fb964f0f2","https://github.com/cloudfoundry/uaa/commit/18cf22ba9177f1124f85f99651b474b48f12cd28","https://github.com/cloudfoundry/uaa/commit/24bc5ade80560cedb9300940d2b398163ab0dc6","https://github.com/cloudfoundry/uaa/commit/24c270ce725df890727b2bd7d8a4f338a3a58b7","https://github.com/cloudfoundry/uaa/commit/3c456f0285e92713a0a9ce54c3e57d8636b9183c","https://github.com/cloudfoundry/uaa/commit/52acfabd11c3c77c2a3f5229b32f56de0e8d26ad","https://github.com/cloudfoundry/uaa/commit/5eb43757d5a3a2c9e7aae1ef3d0b9b7e2a38851e","https://github.com/cloudfoundry/uaa/commit/9d44cb0c7c25ccae95bfa1c2d59ce46200c643cb","https://github.com/cloudfoundry/uaa","https://www.cloudfoundry.org/cve-2017-4973"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-pgjc-gc7g-p2c6","url":"https://osv.dev/vulnerability/GHSA-pgjc-gc7g-p2c6"}],"summary":"Cloud Foundry UAA Privilege Escalation"}