Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2017-4991

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v260; UAA release 2.x versions prior to v2.7.4.16, 3.6.x versions prior to v3.6.10, 3.9.x versions prior to v3.9.12, and other versions prior to v3.17.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.14, 24.x versions prior to v24.9, 30.x versions prior to 30.2, and other versions prior to v36. Privileged users in one zone are allowed to perform a password reset for users in a different zone.

  • Published: Jun 13, 2017
  • Updated: Apr 13, 2023
  • CVE: CVE-2017-4991
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.2
  • AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/Au:S/C:P/I:P/A:P

CWEs:

Software From Fixed in
pivotal_software / cloud_foundry_uaa 2.7.4.15 2.7.4.15.x
pivotal_software / cloud_foundry_uaa 3.6.6 3.6.6.x
pivotal_software / cloud_foundry_uaa 3.6.4 3.6.4.x
pivotal_software / cloud_foundry_uaa 3.9.8 3.9.8.x
pivotal_software / cloud_foundry_uaa 3.9.5 3.9.5.x
pivotal_software / cloud_foundry_uaa 2.7.4.13 2.7.4.13.x
pivotal_software / cloud_foundry_uaa 2.2.5.4 2.2.5.4.x
pivotal_software / cloud_foundry_uaa 2.7.4.4 2.7.4.4.x
pivotal_software / cloud_foundry_uaa 3.6.9 3.6.9.x
pivotal_software / cloud_foundry_uaa 2.7.4.5 2.7.4.5.x
pivotal_software / cloud_foundry_uaa 2.7.4.3 2.7.4.3.x
pivotal_software / cloud_foundry_uaa 3.6.5 3.6.5.x
pivotal_software / cloud_foundry_uaa 3.9.6 3.9.6.x
pivotal_software / cloud_foundry_uaa 3.6.7 3.6.7.x
pivotal_software / cloud_foundry_uaa 2.7.1 2.7.1.x
pivotal_software / cloud_foundry_uaa 3.9.9 3.9.9.x
pivotal_software / cloud_foundry_uaa 2.7.4.2 2.7.4.2.x
pivotal_software / cloud_foundry_uaa 3.6.8 3.6.8.x
pivotal_software / cloud_foundry_uaa - 4.2.0.x
pivotal_software / cloud_foundry_uaa 2.7.3 2.7.3.x
pivotal_software / cloud_foundry_uaa 3.9.3 3.9.3.x
pivotal_software / cloud_foundry_uaa 3.6.2 3.6.2.x
pivotal_software / cloud_foundry_uaa 2.7.4.7 2.7.4.7.x
pivotal_software / cloud_foundry_uaa 3.9.2 3.9.2.x
pivotal_software / cloud_foundry_uaa 2.7.4.12 2.7.4.12.x
pivotal_software / cloud_foundry_uaa 2.7.4.1 2.7.4.1.x
pivotal_software / cloud_foundry_uaa 2.7.4 2.7.4.x
pivotal_software / cloud_foundry_uaa 3.9.7 3.9.7.x
pivotal_software / cloud_foundry_uaa 3.6.3 3.6.3.x
pivotal_software / cloud_foundry_uaa 2.7.4.8 2.7.4.8.x
pivotal_software / cloud_foundry_uaa 2.7.4.9 2.7.4.9.x
pivotal_software / cloud_foundry_uaa 2.7.2 2.7.2.x
pivotal_software / cloud_foundry_uaa 2.7.4.11 2.7.4.11.x
pivotal_software / cloud_foundry_uaa 2.7.4.14 2.7.4.14.x
pivotal_software / cloud_foundry_uaa 2.7.4.6 2.7.4.6.x
pivotal_software / cloud_foundry_uaa 3.9.1 3.9.1.x
pivotal_software / cloud_foundry_uaa 3.9.4 3.9.4.x
pivotal_software / cloud_foundry_uaa 3.6.1 3.6.1.x
cloudfoundry / cloud_foundry_uaa_bosh - 35.x
cloudfoundry / cloud_foundry_uaa_bosh 24 24.x
cloudfoundry / cloud_foundry_uaa_bosh 30 30.x
cloudfoundry / cloud_foundry_uaa_bosh 24.5 24.5.x
cloudfoundry / cloud_foundry_uaa_bosh 24.6 24.6.x
cloudfoundry / cloud_foundry_uaa_bosh 24.3 24.3.x
cloudfoundry / cloud_foundry_uaa_bosh 24.4 24.4.x
cloudfoundry / cloud_foundry_uaa_bosh 24.1 24.1.x
cloudfoundry / cloud_foundry_uaa_bosh 24.2 24.2.x
cloudfoundry / cloud_foundry_uaa_bosh 13.7 13.7.x
cloudfoundry / cloud_foundry_uaa_bosh 13.8 13.8.x
cloudfoundry / cloud_foundry_uaa_bosh 13.5 13.5.x
cloudfoundry / cloud_foundry_uaa_bosh 13.6 13.6.x
cloudfoundry / cloud_foundry_uaa_bosh 13.3 13.3.x
cloudfoundry / cloud_foundry_uaa_bosh 13.4 13.4.x
cloudfoundry / cloud_foundry_uaa_bosh 13.1 13.1.x
cloudfoundry / cloud_foundry_uaa_bosh 13.2 13.2.x
cloudfoundry / cloud_foundry_uaa_bosh 24.10 24.10.x
cloudfoundry / cloud_foundry_uaa_bosh 24.8 24.8.x
cloudfoundry / cloud_foundry_uaa_bosh 24.9 24.9.x
cloudfoundry / cloud_foundry_uaa_bosh 24.7 24.7.x
cloudfoundry / cloud_foundry_uaa_bosh 30.1 30.1.x
cloudfoundry / cloud_foundry_uaa_bosh 13.13 13.13.x
cloudfoundry / cloud_foundry_uaa_bosh 13.11 13.11.x
cloudfoundry / cloud_foundry_uaa_bosh 13.12 13.12.x
cloudfoundry / cloud_foundry_uaa_bosh 13.9 13.9.x
cloudfoundry / cloud_foundry_uaa_bosh 13.10 13.10.x
cloudfoundry / cf-release - 259.x