Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2017-4973

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions prior to v3.6.8, 3.9.x versions prior to v3.9.10, and other versions prior to v3.15.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.12, 24.x versions prior to v24.7, and other versions prior to v30. A vulnerability has been identified with the groups endpoint in UAA allowing users to elevate their privileges.

  • Published: Jun 13, 2017
  • Updated: Apr 13, 2023
  • CVE: CVE-2017-4973
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.8
  • AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/Au:S/C:P/I:P/A:P

CWEs:

Software From Fixed in
pivotal_software / cloud_foundry_uaa 3.6.6 3.6.6.x
pivotal_software / cloud_foundry_uaa 3.6.4 3.6.4.x
pivotal_software / cloud_foundry_uaa 3.9.8 3.9.8.x
pivotal_software / cloud_foundry_uaa 3.9.5 3.9.5.x
pivotal_software / cloud_foundry_uaa 2.7.4.13 2.7.4.13.x
pivotal_software / cloud_foundry_uaa 2.2.5.4 2.2.5.4.x
pivotal_software / cloud_foundry_uaa 2.7.4.4 2.7.4.4.x
pivotal_software / cloud_foundry_uaa 2.7.4.5 2.7.4.5.x
pivotal_software / cloud_foundry_uaa 2.7.4.3 2.7.4.3.x
pivotal_software / cloud_foundry_uaa 3.9.13 3.9.13.x
pivotal_software / cloud_foundry_uaa 3.6.5 3.6.5.x
pivotal_software / cloud_foundry_uaa 3.9.6 3.9.6.x
pivotal_software / cloud_foundry_uaa 3.6.7 3.6.7.x
pivotal_software / cloud_foundry_uaa 2.7.1 2.7.1.x
pivotal_software / cloud_foundry_uaa 3.9.9 3.9.9.x
pivotal_software / cloud_foundry_uaa 2.7.4.2 2.7.4.2.x
pivotal_software / cloud_foundry_uaa 2.7.3 2.7.3.x
pivotal_software / cloud_foundry_uaa 3.9.3 3.9.3.x
pivotal_software / cloud_foundry_uaa 3.6.2 3.6.2.x
pivotal_software / cloud_foundry_uaa 2.7.4.7 2.7.4.7.x
pivotal_software / cloud_foundry_uaa 3.9.2 3.9.2.x
pivotal_software / cloud_foundry_uaa 2.7.4.12 2.7.4.12.x
pivotal_software / cloud_foundry_cf - 256.x
pivotal_software / cloud_foundry_uaa 2.7.4.1 2.7.4.1.x
pivotal_software / cloud_foundry_uaa 2.7.4 2.7.4.x
pivotal_software / cloud_foundry_uaa 3.9.7 3.9.7.x
pivotal_software / cloud_foundry_uaa 3.6.3 3.6.3.x
pivotal_software / cloud_foundry_uaa 2.7.4.8 2.7.4.8.x
pivotal_software / cloud_foundry_uaa 2.7.4.9 2.7.4.9.x
pivotal_software / cloud_foundry_uaa 2.7.2 2.7.2.x
pivotal_software / cloud_foundry_uaa 2.7.4.11 2.7.4.11.x
pivotal_software / cloud_foundry_uaa 2.7.4.6 2.7.4.6.x
pivotal_software / cloud_foundry_uaa 3.9.1 3.9.1.x
pivotal_software / cloud_foundry_uaa 3.9.4 3.9.4.x
pivotal_software / cloud_foundry_uaa 3.6.1 3.6.1.x
pivotal_software / cloud_foundry_uaa 3.9.12 3.9.12.x
cloudfoundry / cloud_foundry_uaa_bosh - 30.x
cloudfoundry / cloud_foundry_uaa_bosh 24 24.x
cloudfoundry / cloud_foundry_uaa_bosh 24.5 24.5.x
cloudfoundry / cloud_foundry_uaa_bosh 24.6 24.6.x
cloudfoundry / cloud_foundry_uaa_bosh 24.3 24.3.x
cloudfoundry / cloud_foundry_uaa_bosh 24.4 24.4.x
cloudfoundry / cloud_foundry_uaa_bosh 24.1 24.1.x
cloudfoundry / cloud_foundry_uaa_bosh 24.2 24.2.x
cloudfoundry / cloud_foundry_uaa_bosh 13.7 13.7.x
cloudfoundry / cloud_foundry_uaa_bosh 13.8 13.8.x
cloudfoundry / cloud_foundry_uaa_bosh 13.5 13.5.x
cloudfoundry / cloud_foundry_uaa_bosh 13.6 13.6.x
cloudfoundry / cloud_foundry_uaa_bosh 13.3 13.3.x
cloudfoundry / cloud_foundry_uaa_bosh 13.4 13.4.x
cloudfoundry / cloud_foundry_uaa_bosh 13.1 13.1.x
cloudfoundry / cloud_foundry_uaa_bosh 13.2 13.2.x
cloudfoundry / cloud_foundry_uaa_bosh 30.3 30.3.x
cloudfoundry / cloud_foundry_uaa_bosh 30.1 30.1.x
cloudfoundry / cloud_foundry_uaa_bosh 30.2 30.2.x
cloudfoundry / cloud_foundry_uaa_bosh 13.11 13.11.x
cloudfoundry / cloud_foundry_uaa_bosh 13.9 13.9.x
cloudfoundry / cloud_foundry_uaa_bosh 13.10 13.10.x