CVE-2017-8048 Code injection in Cloud Controller VM capi-release versions 1.33.0 and later, prior to 1.42.0, cf-release versions 268 and later, prior to 274
A space developer can execute arbitrary code on the Cloud Controller VM by pushing a specially crafted application due to an API regression.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2017-8048?
CVE-2017-8048 is a high-severity code injection vulnerability in Cloud Controller VM capi-release versions 1.33.0 and later, prior to 1.42.0, cf-release versions 268 and later, prior to 274, published on 3 Oct 2017. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
In Cloud Foundry capi-release versions 1.33.0 and later, prior to 1.42.0 and cf-release versions 268 and later, prior to 274, the original fix for CVE-2017-8033 introduces an API regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushing a specially crafted application. NOTE: 274 resolves the vulnerability but has a serious bug that is fixed in 275.
Which versions are affected by CVE-2017-8048?
It affects 2 products.
Products include Cloudfoundry Cf-Release, Pivotal Capi-Release.
How do I fix CVE-2017-8048?
No fix has been published for CVE-2017-8048 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2017-8048 being exploited?
There is no known exploitation of CVE-2017-8048 in the wild and no public exploit code.
Other vulnerabilities in Cloud Controller VM capi-release versions 1.33.0 and later, prior to 1.42.0, cf-release versions 268 and later, prior to 274
- CVE-2015-5171 Cloud Foundry Runtime Insufficient Session Expiration vulnerability
- CVE-2015-5172 Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password
- CVE-2016-8218 Auth bypass in Cloud Foundry
- CVE-2017-4992 Cloud Foundry UAA privilege escalation with user invitations
- CVE-2016-6658 Information disclosure in n/a
Sources
Also known as GHSA-9j8m-7rpr-659f.