7.5
CVSSv2

CVE-2017-2773

Published: 13/06/2017 Updated: 03/07/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

An issue exists in Pivotal PCF Elastic Runtime 1.6.x versions before 1.6.60, 1.7.x versions before 1.7.41, 1.8.x versions before 1.8.23, and 1.9.x versions before 1.9.1. Incomplete validation logic in JSON Web Token (JWT) libraries can allow unprivileged malicious users to impersonate other users in multiple components included in PCF Elastic Runtime, aka an "Unauthenticated JWT signing algorithm in multiple components" issue.

Vulnerable Product Search on Vulmon Subscribe to Product

pivotal software cloud foundry elastic runtime 1.8.17

pivotal software cloud foundry elastic runtime 1.8.15

pivotal software cloud foundry elastic runtime 1.8.10

pivotal software cloud foundry elastic runtime 1.8.8

pivotal software cloud foundry elastic runtime 1.8.1

pivotal software cloud foundry elastic runtime 1.7.39

pivotal software cloud foundry elastic runtime 1.7.32

pivotal software cloud foundry elastic runtime 1.7.30

pivotal software cloud foundry elastic runtime 1.7.25

pivotal software cloud foundry elastic runtime 1.7.23

pivotal software cloud foundry elastic runtime 1.7.16

pivotal software cloud foundry elastic runtime 1.7.14

pivotal software cloud foundry elastic runtime 1.7.7

pivotal software cloud foundry elastic runtime 1.7.5

pivotal software cloud foundry elastic runtime 1.6.59

pivotal software cloud foundry elastic runtime 1.6.57

pivotal software cloud foundry elastic runtime 1.6.50

pivotal software cloud foundry elastic runtime 1.6.48

pivotal software cloud foundry elastic runtime 1.6.41

pivotal software cloud foundry elastic runtime 1.6.39

pivotal software cloud foundry elastic runtime 1.6.34

pivotal software cloud foundry elastic runtime 1.6.32

pivotal software cloud foundry elastic runtime 1.6.25

pivotal software cloud foundry elastic runtime 1.6.23

pivotal software cloud foundry elastic runtime 1.6.16

pivotal software cloud foundry elastic runtime 1.6.14

pivotal software cloud foundry elastic runtime 1.6.9

pivotal software cloud foundry elastic runtime 1.6.7

pivotal software cloud foundry elastic runtime 1.6.0

pivotal software cloud foundry elastic runtime 1.8.14

pivotal software cloud foundry elastic runtime 1.8.13

pivotal software cloud foundry elastic runtime 1.8.12

pivotal software cloud foundry elastic runtime 1.8.11

pivotal software cloud foundry elastic runtime 1.7.37

pivotal software cloud foundry elastic runtime 1.7.36

pivotal software cloud foundry elastic runtime 1.7.35

pivotal software cloud foundry elastic runtime 1.7.34

pivotal software cloud foundry elastic runtime 1.7.21

pivotal software cloud foundry elastic runtime 1.7.20

pivotal software cloud foundry elastic runtime 1.7.19

pivotal software cloud foundry elastic runtime 1.7.18

pivotal software cloud foundry elastic runtime 1.7.4

pivotal software cloud foundry elastic runtime 1.7.3

pivotal software cloud foundry elastic runtime 1.7.2

pivotal software cloud foundry elastic runtime 1.7.1

pivotal software cloud foundry elastic runtime 1.6.46

pivotal software cloud foundry elastic runtime 1.6.45

pivotal software cloud foundry elastic runtime 1.6.44

pivotal software cloud foundry elastic runtime 1.6.43

pivotal software cloud foundry elastic runtime 1.6.30

pivotal software cloud foundry elastic runtime 1.6.29

pivotal software cloud foundry elastic runtime 1.6.28

pivotal software cloud foundry elastic runtime 1.6.27

pivotal software cloud foundry elastic runtime 1.6.26

pivotal software cloud foundry elastic runtime 1.6.13

pivotal software cloud foundry elastic runtime 1.6.12

pivotal software cloud foundry elastic runtime 1.6.11

pivotal software cloud foundry elastic runtime 1.6.10

pivotal software cloud foundry elastic runtime 1.9.0

pivotal software cloud foundry elastic runtime 1.8.22

pivotal software cloud foundry elastic runtime 1.8.21

pivotal software cloud foundry elastic runtime 1.8.20

pivotal software cloud foundry elastic runtime 1.8.19

pivotal software cloud foundry elastic runtime 1.8.6

pivotal software cloud foundry elastic runtime 1.8.5

pivotal software cloud foundry elastic runtime 1.8.4

pivotal software cloud foundry elastic runtime 1.8.3

pivotal software cloud foundry elastic runtime 1.7.29

pivotal software cloud foundry elastic runtime 1.7.28

pivotal software cloud foundry elastic runtime 1.7.27

pivotal software cloud foundry elastic runtime 1.7.26

pivotal software cloud foundry elastic runtime 1.7.12

pivotal software cloud foundry elastic runtime 1.7.11

pivotal software cloud foundry elastic runtime 1.7.10

pivotal software cloud foundry elastic runtime 1.7.9

pivotal software cloud foundry elastic runtime 1.6.55

pivotal software cloud foundry elastic runtime 1.6.54

pivotal software cloud foundry elastic runtime 1.6.53

pivotal software cloud foundry elastic runtime 1.6.52

pivotal software cloud foundry elastic runtime 1.6.51

pivotal software cloud foundry elastic runtime 1.6.38

pivotal software cloud foundry elastic runtime 1.6.37

pivotal software cloud foundry elastic runtime 1.6.36

pivotal software cloud foundry elastic runtime 1.6.35

pivotal software cloud foundry elastic runtime 1.6.21

pivotal software cloud foundry elastic runtime 1.6.20

pivotal software cloud foundry elastic runtime 1.6.19

pivotal software cloud foundry elastic runtime 1.6.18

pivotal software cloud foundry elastic runtime 1.6.5

pivotal software cloud foundry elastic runtime 1.6.4

pivotal software cloud foundry elastic runtime 1.6.3

pivotal software cloud foundry elastic runtime 1.6.2

pivotal software cloud foundry elastic runtime 1.6.1

pivotal software cloud foundry elastic runtime 1.8.18

pivotal software cloud foundry elastic runtime 1.8.16

pivotal software cloud foundry elastic runtime 1.8.9

pivotal software cloud foundry elastic runtime 1.8.7

pivotal software cloud foundry elastic runtime 1.8.2

pivotal software cloud foundry elastic runtime 1.7.40

pivotal software cloud foundry elastic runtime 1.7.38

pivotal software cloud foundry elastic runtime 1.7.33

pivotal software cloud foundry elastic runtime 1.7.31

pivotal software cloud foundry elastic runtime 1.7.24

pivotal software cloud foundry elastic runtime 1.7.22

pivotal software cloud foundry elastic runtime 1.7.17

pivotal software cloud foundry elastic runtime 1.7.15

pivotal software cloud foundry elastic runtime 1.7.13

pivotal software cloud foundry elastic runtime 1.7.8

pivotal software cloud foundry elastic runtime 1.7.6

pivotal software cloud foundry elastic runtime 1.6.58

pivotal software cloud foundry elastic runtime 1.6.56

pivotal software cloud foundry elastic runtime 1.6.49

pivotal software cloud foundry elastic runtime 1.6.47

pivotal software cloud foundry elastic runtime 1.6.42

pivotal software cloud foundry elastic runtime 1.6.40

pivotal software cloud foundry elastic runtime 1.6.33

pivotal software cloud foundry elastic runtime 1.6.31

pivotal software cloud foundry elastic runtime 1.6.24

pivotal software cloud foundry elastic runtime 1.6.22

pivotal software cloud foundry elastic runtime 1.6.17

pivotal software cloud foundry elastic runtime 1.6.15

pivotal software cloud foundry elastic runtime 1.6.8

pivotal software cloud foundry elastic runtime 1.6.6