CVE-2017-4975 Misconfiguration in PCF Tile Generator
The PCF Tile Generator creates tiles with open security groups that override operator settings, allowing unauthorized network access.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-4975?
CVE-2017-4975 is a high-severity vulnerability in PCF Tile Generator, published on 13 Jun 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in Pivotal PCF Tile Generator versions prior to 6.0.0. Tiles created by the PCF Tile Generator create a running open security group that overrides security groups set by the operator.
Weakness: CWE-276
Which versions are affected by CVE-2017-4975?
It affects 1 product.
Products include Pivotal Pcf Tile Generator.
How do I fix CVE-2017-4975?
No fix has been published for CVE-2017-4975 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-4975 being exploited?
There is no known exploitation of CVE-2017-4975 in the wild and no public exploit code.
Sources
Also known as GHSA-g4x5-pp86-35wg.