CVE-2017-8036 An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release version 1.33.0 (only). The original fix for CVE-2017-8033 included in CAPI-release 1.33.0 introduces a regr...
HighCVSS 7.8
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release version 1.33.0 (only). The original fix for CVE-2017-8033 included in CAPI-release 1.33.0 introduces a regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushing a specially crafted application.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cloudfoundry capi-release | = 1.33.0 | No fix listed |
References
- 100002 third-party-advisory vdb-entry
- www.cloudfoundry.org vendor-advisory