An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions prior to v3.6.8, 3.9.x versions prior to v3.9.10, and other versions prior to v3.15.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.12, 24.x versions prior to v24.7, and other versions prior to v30. A vulnerability has been identified with the groups endpoint in UAA allowing users to elevate their privileges.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2024-08-05T14:47:44.126Z

Reserved: 2016-12-29T00:00:00

Link: CVE-2017-4973

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2017-06-13T06:29:00.660

Modified: 2025-04-20T01:37:25.860

Link: CVE-2017-4973

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.