CVE-2017-8036

Description

An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release version 1.33.0 (only). The original fix for CVE-2017-8033 included in CAPI-release 1.33.0 introduces a regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushing a specially crafted application.

References

https://www.cloudfoundry.org/cve-2017-8036/

http://www.securityfocus.com/bid/100002

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3