Vulnerability Description
An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions. In certain cases an authenticated Director user can provide a malicious checksum that could allow them to escalate their privileges on the Director VM, aka "BOSH Director Shell Injection Vulnerabilities."
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cloud Foundry | Bosh | 260 |
Related Weaknesses (CWE)
References
- https://www.cloudfoundry.org/cve-2017-4961/Vendor Advisory
- https://www.cloudfoundry.org/cve-2017-4961/Vendor Advisory
FAQ
What is CVE-2017-4961?
CVE-2017-4961 is a vulnerability with a CVSS score of 8.8 (HIGH). An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions. In certain cases an authenticated Director user can provide a malicious checksum ...
How severe is CVE-2017-4961?
CVE-2017-4961 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-4961?
Check the references section above for vendor advisories and patch information. Affected products include: Cloud Foundry Bosh.