CVE-2017-8033

An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions prior to v1.35.0 and cf-release versions prior to v268

published July 25, 2017

CVSS
—
EPSS
1%
Percentile
62.8
In the wild
Unconfirmed
What it is

An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions prior to v1.35.0 and cf-release versions prior to v268. A filesystem traversal vulnerability exists in the Cloud Controller that allows a space developer to escalate privileges by pushing a specially crafted application that can write arbitrary files to the Cloud Controller VM.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01018 · 62.8th percentile
Published
2017-07-25T04:00Z
EPSS history
Timeline
  • 25 JUL 04:00Z
    An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions prior to v1.35.0 and cf-release versions prior to v268
    cvelistv5