CVE-2017-8037: Infoleak
First published: Mon Aug 21 2017(Updated: )
In Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.38.0 and cf-release versions after v244 and prior to v270, there is an incomplete fix for CVE-2017-8035. If you took steps to remediate CVE-2017-8035 you should also upgrade to fix this CVE. A carefully crafted CAPI request from a Space Developer can allow them to gain access to files on the Cloud Controller VM for that installation, aka an Information Leak / Disclosure.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cloudfoundry Capi-release | =1.7.0 | |
| Cloudfoundry Capi-release | =1.8.0 | |
| Cloudfoundry Capi-release | =1.9.0 | |
| Cloudfoundry Capi-release | =1.10.0 | |
| Cloudfoundry Capi-release | =1.11.0 | |
| Cloudfoundry Capi-release | =1.12.0 | |
| Cloudfoundry Capi-release | =1.13.0 | |
| Cloudfoundry Capi-release | =1.14.0 | |
| Cloudfoundry Capi-release | =1.15.0 | |
| Cloudfoundry Capi-release | =1.16.0 | |
| Cloudfoundry Capi-release | =1.17.0 | |
| Cloudfoundry Capi-release | =1.18.0 | |
| Cloudfoundry Capi-release | =1.19.0 | |
| Cloudfoundry Capi-release | =1.20.0 | |
| Cloudfoundry Capi-release | =1.21.0 | |
| Cloudfoundry Capi-release | =1.22.0 | |
| Cloudfoundry Capi-release | =1.23.0 | |
| Cloudfoundry Capi-release | =1.24.0 | |
| Cloudfoundry Capi-release | =1.25.0 | |
| Cloudfoundry Capi-release | =1.26.0 | |
| Cloudfoundry Capi-release | =1.27.0 | |
| Cloudfoundry Capi-release | =1.28.0 | |
| Cloudfoundry Capi-release | =1.29.0 | |
| Cloudfoundry Capi-release | =1.30.0 | |
| Cloudfoundry Capi-release | =1.31.0 | |
| Cloudfoundry Capi-release | =1.32.0 | |
| Cloudfoundry Capi-release | =1.33.0 | |
| Cloudfoundry Capi-release | =1.34.0 | |
| Cloudfoundry Capi-release | =1.35.0 | |
| Cloudfoundry Capi-release | =1.36.0 | |
| Cloudfoundry Capi-release | =1.37.0 | |
| Cloudfoundry Cf-release | =245 | |
| Cloudfoundry Cf-release | =246 | |
| Cloudfoundry Cf-release | =247 | |
| Cloudfoundry Cf-release | =248 | |
| Cloudfoundry Cf-release | =249 | |
| Cloudfoundry Cf-release | =250 | |
| Cloudfoundry Cf-release | =251 | |
| Cloudfoundry Cf-release | =252 | |
| Cloudfoundry Cf-release | =253 | |
| Cloudfoundry Cf-release | =254 | |
| Cloudfoundry Cf-release | =255 | |
| Cloudfoundry Cf-release | =256 | |
| Cloudfoundry Cf-release | =257 | |
| Cloudfoundry Cf-release | =258 | |
| Cloudfoundry Cf-release | =259 | |
| Cloudfoundry Cf-release | =260 | |
| Cloudfoundry Cf-release | =261 | |
| Cloudfoundry Cf-release | =262 | |
| Cloudfoundry Cf-release | =263 | |
| Cloudfoundry Cf-release | =264 | |
| Cloudfoundry Cf-release | =265 | |
| Cloudfoundry Cf-release | =266 | |
| Cloudfoundry Cf-release | =267 | |
| Cloudfoundry Cf-release | =268 | |
| Cloudfoundry Cf-release | =269 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
- collector/nvd-index
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/author
- agent/weakness
- agent/tags
- agent/type
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/event
- vendor/cloudfoundry
- canonical/cloudfoundry capi-release
- version/cloudfoundry capi-release/1.7.0
- version/cloudfoundry capi-release/1.8.0
- version/cloudfoundry capi-release/1.9.0
- version/cloudfoundry capi-release/1.10.0
- version/cloudfoundry capi-release/1.11.0
- version/cloudfoundry capi-release/1.12.0
- version/cloudfoundry capi-release/1.13.0
- version/cloudfoundry capi-release/1.14.0
- version/cloudfoundry capi-release/1.15.0
- version/cloudfoundry capi-release/1.16.0
- version/cloudfoundry capi-release/1.17.0
- version/cloudfoundry capi-release/1.18.0
- version/cloudfoundry capi-release/1.19.0
- version/cloudfoundry capi-release/1.20.0
- version/cloudfoundry capi-release/1.21.0
- version/cloudfoundry capi-release/1.22.0
- version/cloudfoundry capi-release/1.23.0
- version/cloudfoundry capi-release/1.24.0
- version/cloudfoundry capi-release/1.25.0
- version/cloudfoundry capi-release/1.26.0
- version/cloudfoundry capi-release/1.27.0
- version/cloudfoundry capi-release/1.28.0
- version/cloudfoundry capi-release/1.29.0
- version/cloudfoundry capi-release/1.30.0
- version/cloudfoundry capi-release/1.31.0
- version/cloudfoundry capi-release/1.32.0
- version/cloudfoundry capi-release/1.33.0
- version/cloudfoundry capi-release/1.34.0
- version/cloudfoundry capi-release/1.35.0
- version/cloudfoundry capi-release/1.36.0
- version/cloudfoundry capi-release/1.37.0
- canonical/cloudfoundry cf-release
- version/cloudfoundry cf-release/245
- version/cloudfoundry cf-release/246
- version/cloudfoundry cf-release/247
- version/cloudfoundry cf-release/248
- version/cloudfoundry cf-release/249
- version/cloudfoundry cf-release/250
- version/cloudfoundry cf-release/251
- version/cloudfoundry cf-release/252
- version/cloudfoundry cf-release/253
- version/cloudfoundry cf-release/254
- version/cloudfoundry cf-release/255
- version/cloudfoundry cf-release/256
- version/cloudfoundry cf-release/257
- version/cloudfoundry cf-release/258
- version/cloudfoundry cf-release/259
- version/cloudfoundry cf-release/260
- version/cloudfoundry cf-release/261
- version/cloudfoundry cf-release/262
- version/cloudfoundry cf-release/263
- version/cloudfoundry cf-release/264
- version/cloudfoundry cf-release/265
- version/cloudfoundry cf-release/266
- version/cloudfoundry cf-release/267
- version/cloudfoundry cf-release/268
- version/cloudfoundry cf-release/269