| Package | Affected versions | Patched versions |
|---|---|---|
| bosh cli | < 7.10.5 | 7.10.5 |
A compromised or malicious BOSH Director can execute arbitrary shell commands on the operator's workstation when the operator runs bosh ssh (or bosh scp/bosh logs -f) with default flags. Affected versions: BOSH CLI versions prior to 7.10.5.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free