CVE-2017-4961
NONE EPSS 37.9%
Published Jun 13, 20179y ago · Modified Jun 17, 20262w ago
Published Jun 13, 2017 9y ago
Last Modified Jun 17, 2026 2w ago
Description
An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions. In certain cases an authenticated Director user can provide a malicious checksum that could allow them to escalate their privileges on the Director VM, aka "BOSH Director Shell Injection Vulnerabilities."
Threat Intelligence
EPSS Exploit Probability
37.9% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-354
Affected Products 11
| Vendor | Product | Version | Range |
|---|---|---|---|
| cloud_foundry | bosh | 260 | any |
| cloud_foundry | bosh | 260.1 | any |
| cloud_foundry | bosh | 260.2 | any |
| cloud_foundry | bosh | 260.3 | any |
| cloud_foundry | bosh | 260.4 | any |
| cloud_foundry | bosh | 260.5 | any |
| cloud_foundry | bosh | 260.6 | any |
| cloud_foundry | bosh | 260.7 | any |
| cloud_foundry | bosh | 261 | any |
| cloud_foundry | bosh | 261.1 | any |
| cloud_foundry | bosh | 261.2 | any |
References 1
- cloudfoundry.org https://www.cloudfoundry.org/cve-2017-4961/
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.