Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-4961

An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions. In certain cases an authenticated Director user can provide a

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
dell

Description

An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions. In certain cases an authenticated Director user can provide a malicious checksum that could allow them to escalate their privileges on the Director VM, aka "BOSH Director Shell Injection Vulnerabilities."

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a Cloud Foundry Foundation BOSH Release

  • Cloud Foundry Foundation BOSH Releaseaffected

References