Vulnerability index

Browse CVEs

105 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Cf Deployment HIGH 8.1
CVE-2018-1221

In cf-deployment before 1.14.0 and routing-release before 0.172.0, the Cloud Foundry Gorouter mishandles WebSocket requests for AWS Application Load …

Fix: 0.172.0 / 1.14.0+
Fix from $1,950 2018-03-19
Garden HIGH 7.5
CVE-2015-5350

In Garden versions 0.22.0-0.329.0, a vulnerability has been discovered in the garden-linux nstar executable that allows access to files on the host s…

Fix: 0.330.0+
Fix from $1,950 2018-03-19
Cf Release MEDIUM 6.1
CVE-2018-1190

An issue was discovered in these Pivotal Cloud Foundry products: all versions prior to cf-release v270, UAA v3.x prior to v3.20.2, and UAA bosh v30.x…

Fix: after 269
Fix from $1,600 2018-01-04
Capi Release MEDIUM 6.5
CVE-2017-14389

An issue was discovered in Cloud Foundry Foundation capi-release (all versions prior to 1.45.0), cf-release (all versions prior to v280), and cf-depl…

Fix: 1.0.0 / 1.45.0+
Fix from $1,600 2017-11-28
Cf Release MEDIUM 5.3
CVE-2017-8031

An issue was discovered in Cloud Foundry Foundation cf-release (all versions prior to v279) and UAA (30.x versions prior to 30.6, 45.x versions prior…

Fix: 30.6 / 45.4+
Fix from $1,600 2017-11-27
Cf Release CRITICAL 9.8
CVE-2015-5171

The password change functionality in Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime b…

Fix: 1.7.0 / 2.5.2+
Fix from $2,300 2017-10-24
Cf Release CRITICAL 9.8
CVE-2015-5172

Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have u…

Fix: 1.7.0 / 2.5.2+
Fix from $2,300 2017-10-24
Cf Release HIGH 8.8
CVE-2015-5170

Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow remote attackers to…

Fix: 1.7.0 / 2.5.2+
Fix from $1,950 2017-10-24
Cf Release HIGH 8.8
CVE-2015-5173

Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have u…

Fix: 1.7.0 / 2.5.2+
Fix from $1,950 2017-10-24
Cf Release HIGH 7.8
CVE-2017-8048

In Cloud Foundry capi-release versions 1.33.0 and later, prior to 1.42.0 and cf-release versions 268 and later, prior to 274, the original fix for CV…

Mitigation only
Fix from $1,950 2017-10-04
Cf Release MEDIUM 6.1
CVE-2017-8047

In Cloud Foundry router routing-release all versions prior to v0.163.0 and cf-release all versions prior to v274, in some applications, it is possibl…

Fix: after 273
Fix from $1,600 2017-10-04
Cf Release HIGH 8.8
CVE-2016-0732

The identity zones feature in Pivotal Cloud Foundry 208 through 229; UAA 2.0.0 through 2.7.3 and 3.0.0; UAA-Release 2 through 4, when configured with…

Fix: after 229
Fix from $1,950 2017-09-07
Capi Release HIGH 7.5
CVE-2017-8037

In Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.38.0 and cf-release versions after v244 and prior to v270, there is an…

Mitigation only
Fix from $1,950 2017-08-21
Capi Release HIGH 7.8
CVE-2017-8033

An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions prior to v1.35.0 and cf-release versions prior …

Fix: 1.35.0 / 268+
Fix from $1,950 2017-07-25
Capi Release HIGH 7.5
CVE-2017-8035

An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.35.0 and cf-releas…

Fix: 1.35.0 / 268+
Fix from $1,950 2017-07-25
Capi Release HIGH 7.8
CVE-2017-8036

An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release version 1.33.0 (only). The original fix for CVE-2017-803…

Mitigation only
Fix from $1,950 2017-07-24
Capi Release MEDIUM 6.6
CVE-2017-8034

The Cloud Controller and Router in Cloud Foundry (CAPI-release capi versions prior to v1.32.0, Routing-release versions prior to v0.159.0, CF-release…

Fix: after 266
Fix from $1,600 2017-07-17
Cf Mysql Release CRITICAL 9.8
CVE-2016-6655

An issue was discovered in Cloud Foundry Foundation Cloud Foundry release versions prior to v245 and cf-mysql-release versions prior to v31. A comman…

Fix: after 244
Fix from $2,300 2017-06-13
Cf Release CRITICAL 9.8
CVE-2016-8218

An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validati…

Fix: after 203
Fix from $2,300 2017-06-13
Cf Release CRITICAL 9.8
CVE-2017-4992

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x versions pr…

Fix: after 260
Fix from $2,300 2017-06-13
Cloud Foundry Uaa Bosh HIGH 8.8
CVE-2017-4973

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions pr…

Fix: after 256
Fix from $1,950 2017-06-13
Cf Release HIGH 7.5
CVE-2017-4972

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions pr…

Fix: after 256
Fix from $1,950 2017-06-13
Cloud Foundry Uaa Bosh HIGH 7.5
CVE-2017-4994

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v263; UAA release 2.x versions prior to v2.7.4.18, 3.6.x versions pr…

Fix: after 262
Fix from $1,950 2017-06-13
Cf Release HIGH 7.2
CVE-2017-4991

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v260; UAA release 2.x versions prior to v2.7.4.16, 3.6.x versions pr…

Fix: after 259
Fix from $1,950 2017-06-13
Capi Release MEDIUM 6.5
CVE-2016-8219

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to 250 and CAPI-release versions prior to 1.12.0. A user with the Space…

Fix: 1.12.0 / 250+
Fix from $1,600 2017-06-13
Cf Release MEDIUM 6.5
CVE-2017-4974

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v258; UAA release 2.x versions prior to v2.7.4.15, 3.6.x versions pr…

Fix: after 30
Fix from $1,600 2017-06-13
Cf Release MEDIUM 5.9
CVE-2017-4970

An issue was discovered in Cloud Foundry Foundation cf-release v255 and Staticfile buildpack versions v1.4.0 - v1.4.3. A regression introduced in the…

Mitigation only
Fix from $1,600 2017-06-13
Garden Linux CRITICAL 9.8
CVE-2016-0761

Cloud Foundry Garden-Linux versions prior to v0.333.0 and Elastic Runtime 1.6.x version prior to 1.6.17 contain a flaw in managing container files du…

Fix: after 0.332.0
Fix from $2,300 2017-05-25
Cf Release HIGH 8.8
CVE-2015-3191

With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or e…

Fix: after 209
Fix from $1,950 2017-05-25
Cloud Foundry Uaa Bosh HIGH 8.1
CVE-2016-3084

The UAA reset password flow in Cloud Foundry release v236 and earlier versions, UAA release v3.3.0 and earlier versions, all versions of Login-server…

Fix: after 236
Fix from $1,950 2017-05-25