CVEvulnerability

CVE-2017-4960

7.5 HIGH Published 2017-03-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-03-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

An issue was discovered in Cloud Foundry release v247 through v252, UAA stand-alone release v3.9.0 through v3.11.0, and UAA Bosh Release v21 through v26. There is a potential to subject the UAA OAuth clients to a denial of service attack.

Affected configurations

• cloudfoundry cloud foundry uaa bosh 21 • cloudfoundry cloud foundry uaa bosh 22 • cloudfoundry cloud foundry uaa bosh 23 • cloudfoundry cloud foundry uaa bosh 24 • cloudfoundry cloud foundry uaa bosh 24.1 • cloudfoundry cloud foundry uaa bosh 24.2 • cloudfoundry cloud foundry uaa bosh 24.3 • cloudfoundry cloud foundry uaa bosh 24.4 • cloudfoundry cloud foundry uaa bosh 24.5 • cloudfoundry cloud foundry uaa bosh 24.6 • cloudfoundry cloud foundry uaa bosh 25 • cloudfoundry cloud foundry uaa bosh 26 • pivotal software cloud foundry 247.0 • pivotal software cloud foundry 248.0 • pivotal software cloud foundry 249.0 • pivotal software cloud foundry 250.0 • pivotal software cloud foundry 251.0 • pivotal software cloud foundry 252.0 • pivotal software cloud foundry uaa 3.9.0 • pivotal software cloud foundry uaa 3.9.1 • pivotal software cloud foundry uaa 3.9.2 • pivotal software cloud foundry uaa 3.9.3 • pivotal software cloud foundry uaa 3.9.4 • pivotal software cloud foundry uaa 3.9.5 • pivotal software cloud foundry uaa 3.9.6 • pivotal software cloud foundry uaa 3.9.7 • pivotal software cloud foundry uaa 3.9.8 • pivotal software cloud foundry uaa 3.10.0 • pivotal software cloud foundry uaa 3.11.0

References