VDB
CVE-2017-4994
CVE-2017-4994
PUBLISHED
CVSS 7.5 HIGH
An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v263; UAA release 2.x versions prior to v2.7.4.18, 3.6.x versions prior to v3.6.12, 3.9.x versions prior to v3.9.14, and other versions prior to v4.3.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.16, 24.x versions prior to v24.11, 30.x versions prior to 30.4, and other versions prior to v40. There was an issue with forwarded http headers in UAA that could result in account corruption.
EPSS 1.10% · 62.7th percentile
Risk Scores
CVSS 3.0
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS Score
1.10%
62.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| pivotal_software | cloud_foundry_uaa | 3.6.10, 2.7.4.7, 2.7.4.8 |
| pivotal_software | cloud_foundry_cf | 0 |
| cloudfoundry | cloud_foundry_uaa_bosh | 13.1, 13.2, 13.3 |
| n/a | Cloud Foundry | Cloud Foundry |
Timeline
- Jun 13, 2017 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Dec 27, 2021 EPSS Score
- Feb 28, 2022 EPSS Score
- May 2, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Nov 7, 2022 EPSS Score
- Jan 8, 2023 EPSS Score