Multiple Cloud Foundry Products CVE-2017-8031 Denial of Service Vulnerability
BID:101967
CVE-2017-8031 |Info
Multiple Cloud Foundry Products CVE-2017-8031 Denial of Service Vulnerability
| Bugtraq ID: | 101967 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2017-8031 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 07 2017 12:00AM |
| Updated: | Dec 19 2017 10:37PM |
| Credit: | This issue reported by the vendor. |
| Vulnerable: |
Pivotal UAA BOSH 52.0 Pivotal UAA BOSH 45.0 Pivotal UAA BOSH 30.0 Pivotal PCF Ops Manager 1.8.1 Pivotal PCF Ops Manager 1.7.13 Pivotal PCF Ops Manager 1.7.8 Pivotal PCF Ops Manager 1.7 Pivotal PCF Ops Manager 1.6.17 Pivotal PCF Ops Manager 1.6.9 Pivotal PCF Ops Manager 1.6.8 Pivotal PCF Ops Manager 1.6 Pivotal PCF Ops Manager 1.5.14 Pivotal PCF Ops Manager 1.5.13 Pivotal PCF Ops Manager 1.5 Pivotal PCF Ops Manager 1.4 Pivotal PCF Ops Manager 1.8 Pivotal PCF Ops Manager 1.7 Pivotal PCF Ops Manager 1.0 Pivotal PCF Elastic Runtime 1.8.2 Pivotal PCF Elastic Runtime 1.7.21 Pivotal PCF Elastic Runtime 1.6.40 Pivotal PCF Elastic Runtime 1.8 Pivotal PCF Elastic Runtime 1.7 Pivotal PCF Elastic Runtime 1.6 Cloud Foundry cf-release 90 Cloud Foundry cf-release 80 Cloud Foundry cf-release 70 Cloud Foundry cf-release 68 Cloud Foundry cf-release 270 Cloud Foundry cf-release 269 Cloud Foundry cf-release 268 Cloud Foundry cf-release 267 Cloud Foundry cf-release 260 Cloud Foundry cf-release 250 Cloud Foundry cf-release 245 Cloud Foundry cf-release 240 Cloud Foundry cf-release 230 Cloud Foundry cf-release 220 Cloud Foundry cf-release 210 Cloud Foundry cf-release 200 Cloud Foundry cf-release 100 Cloud Foundry cf-release 0 |
| Not Vulnerable: |
Pivotal UAA BOSH 52.1 Pivotal UAA BOSH 45.4 Pivotal UAA BOSH 30.6 Pivotal PCF Ops Manager 1.12.14 Pivotal PCF Ops Manager 1.11.13 Pivotal PCF Ops Manager 1.10.18 Pivotal PCF Elastic Runtime 1.12.6 Pivotal PCF Elastic Runtime 1.11.18 Pivotal PCF Elastic Runtime 1.10.32 Cloud Foundry cf-release 279 |
Exploit / POC
Multiple Cloud Foundry Products CVE-2017-8031 Denial of Service Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Multiple Cloud Foundry Products CVE-2017-8031 Denial of Service Vulnerability
References:
References:
- Cloud Foundry Homepage (Cloud Foundry Foundation)
- CVE-2017-8031: UAA Denial of Service through client token revocation endpoint (cloudfoundry)
- UAA Denial of Service through client token revocation endpoint (pivotal)