7.2
CVSSv3

CVE-2017-4991

Published: 13/06/2017 Updated: 03/06/2022
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
CVSS v3 Base Score: 7.2 | Impact Score: 5.9 | Exploitability Score: 1.2
VMScore: 578
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

An issue exists in Cloud Foundry Foundation cf-release versions prior to v260; UAA release 2.x versions prior to v2.7.4.16, 3.6.x versions prior to v3.6.10, 3.9.x versions prior to v3.9.12, and other versions prior to v3.17.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.14, 24.x versions prior to v24.9, 30.x versions before 30.2, and other versions prior to v36. Privileged users in one zone are allowed to perform a password reset for users in a different zone.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

pivotal software cloud foundry uaa 2.7.4.15

pivotal software cloud foundry uaa 3.6.6

pivotal software cloud foundry uaa 3.6.4

pivotal software cloud foundry uaa 3.9.8

pivotal software cloud foundry uaa 3.9.5

pivotal software cloud foundry uaa 2.7.4.13

pivotal software cloud foundry uaa 2.2.5.4

pivotal software cloud foundry uaa 2.7.4.4

pivotal software cloud foundry uaa 3.6.9

pivotal software cloud foundry uaa 2.7.4.5

pivotal software cloud foundry uaa 2.7.1

pivotal software cloud foundry uaa 2.7.3

pivotal software cloud foundry uaa 2.7.4

pivotal software cloud foundry uaa 2.7.4.1

pivotal software cloud foundry uaa 2.7.4.2

pivotal software cloud foundry uaa 2.7.4.3

pivotal software cloud foundry uaa 2.7.4.7

pivotal software cloud foundry uaa 2.7.4.8

pivotal software cloud foundry uaa 2.7.4.12

pivotal software cloud foundry uaa 3.6.2

pivotal software cloud foundry uaa 3.6.3

pivotal software cloud foundry uaa 3.6.5

pivotal software cloud foundry uaa 3.6.7

pivotal software cloud foundry uaa 3.6.8

pivotal software cloud foundry uaa 3.9.2

pivotal software cloud foundry uaa 3.9.3

pivotal software cloud foundry uaa 3.9.6

pivotal software cloud foundry uaa 3.9.7

pivotal software cloud foundry uaa 3.9.9

pivotal software cloud foundry uaa

cloudfoundry cf-release

cloudfoundry cloud foundry uaa bosh 13.1

cloudfoundry cloud foundry uaa bosh 13.2

cloudfoundry cloud foundry uaa bosh 13.3

cloudfoundry cloud foundry uaa bosh 13.4

cloudfoundry cloud foundry uaa bosh 13.5

cloudfoundry cloud foundry uaa bosh 13.6

cloudfoundry cloud foundry uaa bosh 13.7

cloudfoundry cloud foundry uaa bosh 13.8

cloudfoundry cloud foundry uaa bosh 13.9

cloudfoundry cloud foundry uaa bosh 13.10

cloudfoundry cloud foundry uaa bosh 13.11

cloudfoundry cloud foundry uaa bosh 13.12

cloudfoundry cloud foundry uaa bosh 13.13

cloudfoundry cloud foundry uaa bosh 24

cloudfoundry cloud foundry uaa bosh 24.1

cloudfoundry cloud foundry uaa bosh 24.2

cloudfoundry cloud foundry uaa bosh 24.3

cloudfoundry cloud foundry uaa bosh 24.4

cloudfoundry cloud foundry uaa bosh 24.5

cloudfoundry cloud foundry uaa bosh 24.6

cloudfoundry cloud foundry uaa bosh 24.7

cloudfoundry cloud foundry uaa bosh 24.8

cloudfoundry cloud foundry uaa bosh 24.9

cloudfoundry cloud foundry uaa bosh 24.10

cloudfoundry cloud foundry uaa bosh 30

cloudfoundry cloud foundry uaa bosh 30.1

cloudfoundry cloud foundry uaa bosh

pivotal software cloud foundry uaa 2.7.2

pivotal software cloud foundry uaa 2.7.4.6

pivotal software cloud foundry uaa 2.7.4.9

pivotal software cloud foundry uaa 2.7.4.11

pivotal software cloud foundry uaa 2.7.4.14

pivotal software cloud foundry uaa 3.6.1

pivotal software cloud foundry uaa 3.9.1

pivotal software cloud foundry uaa 3.9.4