CVE-2017-8036: High severity cloudfoundry Capi-release vulnerability

Published Jul 24, 2017

Updated

An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release version 1.33.0 (only). The original fix for CVE-2017-8033 included in CAPI-release 1.33.0 introduces a regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushing a specially crafted application.

Affected Software

1 affected component

cloudfoundry Capi-release=1.33.0

Event History

Jul 24, 2017

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-8036?

CVE-2017-8036 has a critical severity rating due to its potential to allow arbitrary code execution on the Cloud Controller VM.

How do I fix CVE-2017-8036?

To resolve CVE-2017-8036, upgrade your Cloud Foundry CAPI-release to a version beyond 1.33.0 that addresses this vulnerability.

Who is affected by CVE-2017-8036?

CVE-2017-8036 affects users of the Cloud Foundry CAPI-release specifically version 1.33.0.

What impact does CVE-2017-8036 have on Cloud Foundry?

CVE-2017-8036 allows space developers to execute arbitrary code, potentially compromising the Cloud Controller VM.

Is there a workaround for CVE-2017-8036?

There is no known workaround for CVE-2017-8036; upgrading to a safe version is the only effective mitigation.