CVE-2017-4969

概要

参考情報

• cloudfoundry.org/cve-2017-4969 · Vendor Advisory

cf-release のその他の脆弱性

• CVE-2016-0708中 5.9Applications deployed to Cloud Foundry, versions v166 through v227, may be vulnerable to a remote disclosure of information, including, but …
• CVE-2016-2169中 5.3Cloud Foundry Cloud Controller, capi-release versions prior to 1.0.0 and cf-release versions prior to v237, contain a business logic flaw. A…
• CVE-2016-6658緊急 9.6Applications in cf-release before 245 can be configured and pushed with a user-provided custom buildpack using a URL pointing to the buildpa…
• CVE-2018-1195高 8.8In Cloud Controller versions prior to 1.46.0, cf-deployment versions prior to 1.3.0, and cf-release versions prior to 283, Cloud Controller …
• CVE-2018-1190中 6.1An issue was discovered in these Pivotal Cloud Foundry products: all versions prior to cf-release v270, UAA v3.x prior to v3.20.2, and UAA b…