CVE-2017-4972: SQL Injection
First published: Tue Jun 13 2017(Updated: )
An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions prior to v3.6.8, 3.9.x versions prior to v3.9.10, and other versions prior to v3.15.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.12, 24.x versions prior to v24.7, and other versions prior to v30. An attacker can use a blind SQL injection attack to query the contents of the UAA database.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cloudfoundry Cf-release | <=256 | |
| Cloudfoundry Cloud Foundry Uaa Bosh | <=29 | |
| Cloudfoundry Cloud Foundry Uaa Bosh | =13.1 | |
| Cloudfoundry Cloud Foundry Uaa Bosh | =13.2 | |
| Cloudfoundry Cloud Foundry Uaa Bosh | =13.3 | |
| Cloudfoundry Cloud Foundry Uaa Bosh | =13.4 | |
| Cloudfoundry Cloud Foundry Uaa Bosh | =13.5 | |
| Cloudfoundry Cloud Foundry Uaa Bosh | =13.6 | |
| Cloudfoundry Cloud Foundry Uaa Bosh | =13.7 | |
| Cloudfoundry Cloud Foundry Uaa Bosh | =13.8 | |
| Cloudfoundry Cloud Foundry Uaa Bosh | =13.9 | |
| Cloudfoundry Cloud Foundry Uaa Bosh | =13.10 | |
| Cloudfoundry Cloud Foundry Uaa Bosh | =13.11 | |
| Cloudfoundry Cloud Foundry Uaa Bosh | =24 | |
| Cloudfoundry Cloud Foundry Uaa Bosh | =24.1 | |
| Cloudfoundry Cloud Foundry Uaa Bosh | =24.2 | |
| Cloudfoundry Cloud Foundry Uaa Bosh | =24.3 | |
| Cloudfoundry Cloud Foundry Uaa Bosh | =24.4 | |
| Cloudfoundry Cloud Foundry Uaa Bosh | =24.5 | |
| Cloudfoundry Cloud Foundry Uaa Bosh | =24.6 | |
| Cloudfoundry Cloud Foundry Uaa Bosh | =30 | |
| Cloudfoundry Cloud Foundry Uaa Bosh | =30.1 | |
| Cloudfoundry Cloud Foundry Uaa Bosh | =30.2 | |
| Cloudfoundry Cloud Foundry Uaa Bosh | =30.3 | |
| Pivotal Software Cloud Foundry Uaa | <=3.15.0 | |
| Pivotal Software Cloud Foundry Uaa | =2.2.5.4 | |
| Pivotal Software Cloud Foundry Uaa | =2.7.1 | |
| Pivotal Software Cloud Foundry Uaa | =2.7.2 | |
| Pivotal Software Cloud Foundry Uaa | =2.7.3 | |
| Pivotal Software Cloud Foundry Uaa | =2.7.4 | |
| Pivotal Software Cloud Foundry Uaa | =2.7.4.1 | |
| Pivotal Software Cloud Foundry Uaa | =2.7.4.2 | |
| Pivotal Software Cloud Foundry Uaa | =2.7.4.3 | |
| Pivotal Software Cloud Foundry Uaa | =2.7.4.4 | |
| Pivotal Software Cloud Foundry Uaa | =2.7.4.5 | |
| Pivotal Software Cloud Foundry Uaa | =2.7.4.6 | |
| Pivotal Software Cloud Foundry Uaa | =2.7.4.7 | |
| Pivotal Software Cloud Foundry Uaa | =2.7.4.8 | |
| Pivotal Software Cloud Foundry Uaa | =2.7.4.9 | |
| Pivotal Software Cloud Foundry Uaa | =2.7.4.11 | |
| Pivotal Software Cloud Foundry Uaa | =2.7.4.12 | |
| Pivotal Software Cloud Foundry Uaa | =2.7.4.13 | |
| Pivotal Software Cloud Foundry Uaa | =3.6.1 | |
| Pivotal Software Cloud Foundry Uaa | =3.6.2 | |
| Pivotal Software Cloud Foundry Uaa | =3.6.3 | |
| Pivotal Software Cloud Foundry Uaa | =3.6.4 | |
| Pivotal Software Cloud Foundry Uaa | =3.6.5 | |
| Pivotal Software Cloud Foundry Uaa | =3.6.6 | |
| Pivotal Software Cloud Foundry Uaa | =3.6.7 | |
| Pivotal Software Cloud Foundry Uaa | =3.6.8 | |
| Pivotal Software Cloud Foundry Uaa | =3.6.9 | |
| Pivotal Software Cloud Foundry Uaa | =3.9.1 | |
| Pivotal Software Cloud Foundry Uaa | =3.9.2 | |
| Pivotal Software Cloud Foundry Uaa | =3.9.3 | |
| Pivotal Software Cloud Foundry Uaa | =3.9.4 | |
| Pivotal Software Cloud Foundry Uaa | =3.9.5 | |
| Pivotal Software Cloud Foundry Uaa | =3.9.6 | |
| Pivotal Software Cloud Foundry Uaa | =3.9.7 | |
| Pivotal Software Cloud Foundry Uaa | =3.9.8 | |
| Pivotal Software Cloud Foundry Uaa | =3.9.9 | |
| Pivotal Software Cloud Foundry Uaa | =3.9.12 | |
| Pivotal Software Cloud Foundry Uaa | =3.9.13 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/weakness
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/cloudfoundry
- canonical/cloudfoundry cf-release
- version/cloudfoundry cf-release/256
- canonical/cloudfoundry cloud foundry uaa bosh
- version/cloudfoundry cloud foundry uaa bosh/29
- version/cloudfoundry cloud foundry uaa bosh/13.1
- version/cloudfoundry cloud foundry uaa bosh/13.2
- version/cloudfoundry cloud foundry uaa bosh/13.3
- version/cloudfoundry cloud foundry uaa bosh/13.4
- version/cloudfoundry cloud foundry uaa bosh/13.5
- version/cloudfoundry cloud foundry uaa bosh/13.6
- version/cloudfoundry cloud foundry uaa bosh/13.7
- version/cloudfoundry cloud foundry uaa bosh/13.8
- version/cloudfoundry cloud foundry uaa bosh/13.9
- version/cloudfoundry cloud foundry uaa bosh/13.10
- version/cloudfoundry cloud foundry uaa bosh/13.11
- version/cloudfoundry cloud foundry uaa bosh/24
- version/cloudfoundry cloud foundry uaa bosh/24.1
- version/cloudfoundry cloud foundry uaa bosh/24.2
- version/cloudfoundry cloud foundry uaa bosh/24.3
- version/cloudfoundry cloud foundry uaa bosh/24.4
- version/cloudfoundry cloud foundry uaa bosh/24.5
- version/cloudfoundry cloud foundry uaa bosh/24.6
- version/cloudfoundry cloud foundry uaa bosh/30
- version/cloudfoundry cloud foundry uaa bosh/30.1
- version/cloudfoundry cloud foundry uaa bosh/30.2
- version/cloudfoundry cloud foundry uaa bosh/30.3
- vendor/pivotal software
- canonical/pivotal software cloud foundry uaa
- version/pivotal software cloud foundry uaa/3.15.0
- version/pivotal software cloud foundry uaa/2.2.5.4
- version/pivotal software cloud foundry uaa/2.7.1
- version/pivotal software cloud foundry uaa/2.7.2
- version/pivotal software cloud foundry uaa/2.7.3
- version/pivotal software cloud foundry uaa/2.7.4
- version/pivotal software cloud foundry uaa/2.7.4.1
- version/pivotal software cloud foundry uaa/2.7.4.2
- version/pivotal software cloud foundry uaa/2.7.4.3
- version/pivotal software cloud foundry uaa/2.7.4.4
- version/pivotal software cloud foundry uaa/2.7.4.5
- version/pivotal software cloud foundry uaa/2.7.4.6
- version/pivotal software cloud foundry uaa/2.7.4.7
- version/pivotal software cloud foundry uaa/2.7.4.8
- version/pivotal software cloud foundry uaa/2.7.4.9
- version/pivotal software cloud foundry uaa/2.7.4.11
- version/pivotal software cloud foundry uaa/2.7.4.12
- version/pivotal software cloud foundry uaa/2.7.4.13
- version/pivotal software cloud foundry uaa/3.6.1
- version/pivotal software cloud foundry uaa/3.6.2
- version/pivotal software cloud foundry uaa/3.6.3
- version/pivotal software cloud foundry uaa/3.6.4
- version/pivotal software cloud foundry uaa/3.6.5
- version/pivotal software cloud foundry uaa/3.6.6
- version/pivotal software cloud foundry uaa/3.6.7
- version/pivotal software cloud foundry uaa/3.6.8
- version/pivotal software cloud foundry uaa/3.6.9
- version/pivotal software cloud foundry uaa/3.9.1
- version/pivotal software cloud foundry uaa/3.9.2
- version/pivotal software cloud foundry uaa/3.9.3
- version/pivotal software cloud foundry uaa/3.9.4
- version/pivotal software cloud foundry uaa/3.9.5
- version/pivotal software cloud foundry uaa/3.9.6
- version/pivotal software cloud foundry uaa/3.9.7
- version/pivotal software cloud foundry uaa/3.9.8
- version/pivotal software cloud foundry uaa/3.9.9
- version/pivotal software cloud foundry uaa/3.9.12
- version/pivotal software cloud foundry uaa/3.9.13