CVE-2017-4961
High
Description
An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions. In certain cases an authenticated Director user can provide a malicious checksum that could allow them to escalate their privileges on the Director VM, aka "BOSH Director Shell Injection Vulnerabilities."
SeverityHigh
CVSS8.8
Exploit probability—
ProductCloud Foundry Bosh
PublishedJun 13, 2017
First seenJun 13, 2017
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cloud_foundry bosh | 260, 260.1, 260.2, 260.3, 260.4, 260.5, 260.6, 260.7, 261, 261.1, 261.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.