Vulnerability Description
An issue was discovered in Pivotal PCF Elastic Runtime 1.8.x versions prior to 1.8.29 and 1.9.x versions prior to 1.9.7. Pivotal Cloud Foundry deployments using the Pivotal Account application are vulnerable to a flaw which allows an authorized user to take over the account of another user, causing account lockout and potential escalation of privileges.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Pivotal Software | Cloud Foundry Elastic Runtime | 1.8.0 |
References
- http://www.securityfocus.com/bid/96218Third Party AdvisoryVDB Entry
- https://pivotal.io/security/cve-2017-4959Vendor Advisory
- http://www.securityfocus.com/bid/96218Third Party AdvisoryVDB Entry
- https://pivotal.io/security/cve-2017-4959Vendor Advisory
FAQ
What is CVE-2017-4959?
CVE-2017-4959 is a vulnerability with a CVSS score of 8.8 (HIGH). An issue was discovered in Pivotal PCF Elastic Runtime 1.8.x versions prior to 1.8.29 and 1.9.x versions prior to 1.9.7. Pivotal Cloud Foundry deployments using the Pivotal Account application are vul...
How severe is CVE-2017-4959?
CVE-2017-4959 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-4959?
Check the references section above for vendor advisories and patch information. Affected products include: Pivotal Software Cloud Foundry Elastic Runtime.