CVE-2017-4994 Other in Cloud Foundry

What is CVE-2017-4994?

CVE-2017-4994 is a high-severity vulnerability in Cloud Foundry, published on 13 Jun 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v263; UAA release 2.x versions prior to v2.7.4.18, 3.6.x versions prior to v3.6.12, 3.9.x versions prior to v3.9.14, and other versions prior to v4.3.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.16, 24.x versions prior to v24.11, 30.x versions prior to 30.4, and other versions prior to v40. There was an issue with forwarded http headers in UAA that could result in account corruption.

Weakness: CWE-20

Which versions are affected by CVE-2017-4994?

It affects 3 products.

Products include Cloudfoundry Cloud Foundry Uaa Bosh, Pivotal Software Cloud Foundry Cf, Pivotal Software Cloud Foundry Uaa.

How do I fix CVE-2017-4994?

No fix has been published for CVE-2017-4994 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-4994 being exploited?

There is no known exploitation of CVE-2017-4994 in the wild and no public exploit code.

Other vulnerabilities in Cloud Foundry

• CVE-2016-6637 Cloud Foundry vulnerable to Cross-Site Request Forgery Critical 9.6
• CVE-2017-4973 Cloud Foundry UAA Privilege Escalation High 8.8
• CVE-2016-4468 SQL injection in n/a High 8.8
• CVE-2016-6651 Privilege escalation in n/a High 8.8
• CVE-2016-3084 Cloud Foundry UAA reset password vulnerable to brute force attack High 8.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-75xv-v35m-f8rh.