CVE-2017-4960
10.03.2017, 01:59
An issue was discovered in Cloud Foundry release v247 through v252, UAA stand-alone release v3.9.0 through v3.11.0, and UAA Bosh Release v21 through v26. There is a potential to subject the UAA OAuth clients to a denial of service attack.Enginsight
| Vendor | Product | Version |
|---|---|---|
| cloudfoundry | cloud_foundry_uaa_bosh | 24.1 |
| cloudfoundry | cloud_foundry_uaa_bosh | 24.2 |
| cloudfoundry | cloud_foundry_uaa_bosh | 24.3 |
| cloudfoundry | cloud_foundry_uaa_bosh | 24.4 |
| cloudfoundry | cloud_foundry_uaa_bosh | 24.5 |
| cloudfoundry | cloud_foundry_uaa_bosh | 24.6 |
| pivotal_software | cloud_foundry | 247.0 |
| pivotal_software | cloud_foundry | 248.0 |
| pivotal_software | cloud_foundry | 249.0 |
| pivotal_software | cloud_foundry | 250.0 |
| pivotal_software | cloud_foundry | 251.0 |
| pivotal_software | cloud_foundry | 252.0 |
| pivotal_software | cloud_foundry_uaa | 3.9.0 |
| pivotal_software | cloud_foundry_uaa | 3.9.1 |
| pivotal_software | cloud_foundry_uaa | 3.9.2 |
| pivotal_software | cloud_foundry_uaa | 3.9.3 |
| pivotal_software | cloud_foundry_uaa | 3.9.4 |
| pivotal_software | cloud_foundry_uaa | 3.9.5 |
| pivotal_software | cloud_foundry_uaa | 3.9.6 |
| pivotal_software | cloud_foundry_uaa | 3.9.7 |
| pivotal_software | cloud_foundry_uaa | 3.9.8 |
| pivotal_software | cloud_foundry_uaa | 3.10.0 |
| pivotal_software | cloud_foundry_uaa | 3.11.0 |
𝑥
= Vulnerable software versions