Browse CVEs

HIGH 8.1 CVE-2018-1221 In cf-deployment before 1.14.0 and routing-release before 0.172.0, the Cloud Foundry Gorouter mishandles WebSocket requests for AWS Application Load … Cf Deployment 0.172.0 / 1.14.0+ Fix from $1,9502018-03-19 HIGH 7.5 CVE-2015-5350 In Garden versions 0.22.0-0.329.0, a vulnerability has been discovered in the garden-linux nstar executable that allows access to files on the host s… Garden 0.330.0+ Fix from $1,9502018-03-19 MEDIUM 6.1 CVE-2018-1190 An issue was discovered in these Pivotal Cloud Foundry products: all versions prior to cf-release v270, UAA v3.x prior to v3.20.2, and UAA bosh v30.x… Cf Release after 269 Fix from $1,6002018-01-04 MEDIUM 6.5 CVE-2017-14389 An issue was discovered in Cloud Foundry Foundation capi-release (all versions prior to 1.45.0), cf-release (all versions prior to v280), and cf-depl… Capi Release 1.0.0 / 1.45.0+ Fix from $1,6002017-11-28 MEDIUM 5.3 CVE-2017-8031 An issue was discovered in Cloud Foundry Foundation cf-release (all versions prior to v279) and UAA (30.x versions prior to 30.6, 45.x versions prior… Cf Release 30.6 / 45.4+ Fix from $1,6002017-11-27 CRITICAL 9.8 CVE-2015-5171 The password change functionality in Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime b… Cf Release 1.7.0 / 2.5.2+ Fix from $2,3002017-10-24 CRITICAL 9.8 CVE-2015-5172 Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have u… Cf Release 1.7.0 / 2.5.2+ Fix from $2,3002017-10-24 HIGH 8.8 CVE-2015-5170 Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow remote attackers to… Cf Release 1.7.0 / 2.5.2+ Fix from $1,9502017-10-24 HIGH 8.8 CVE-2015-5173 Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have u… Cf Release 1.7.0 / 2.5.2+ Fix from $1,9502017-10-24 HIGH 7.8 CVE-2017-8048 In Cloud Foundry capi-release versions 1.33.0 and later, prior to 1.42.0 and cf-release versions 268 and later, prior to 274, the original fix for CV… Cf Release Mitigation only Fix from $1,9502017-10-04 MEDIUM 6.1 CVE-2017-8047 In Cloud Foundry router routing-release all versions prior to v0.163.0 and cf-release all versions prior to v274, in some applications, it is possibl… Cf Release after 273 Fix from $1,6002017-10-04 HIGH 8.8 CVE-2016-0732 The identity zones feature in Pivotal Cloud Foundry 208 through 229; UAA 2.0.0 through 2.7.3 and 3.0.0; UAA-Release 2 through 4, when configured with… Cf Release after 229 Fix from $1,9502017-09-07 HIGH 7.5 CVE-2017-8037 In Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.38.0 and cf-release versions after v244 and prior to v270, there is an… Capi Release Mitigation only Fix from $1,9502017-08-21 HIGH 7.8 CVE-2017-8033 An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions prior to v1.35.0 and cf-release versions prior … Capi Release 1.35.0 / 268+ Fix from $1,9502017-07-25 HIGH 7.5 CVE-2017-8035 An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.35.0 and cf-releas… Capi Release 1.35.0 / 268+ Fix from $1,9502017-07-25 HIGH 7.8 CVE-2017-8036 An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release version 1.33.0 (only). The original fix for CVE-2017-803… Capi Release Mitigation only Fix from $1,9502017-07-24 MEDIUM 6.6 CVE-2017-8034 The Cloud Controller and Router in Cloud Foundry (CAPI-release capi versions prior to v1.32.0, Routing-release versions prior to v0.159.0, CF-release… Capi Release after 266 Fix from $1,6002017-07-17 CRITICAL 9.8 CVE-2016-6655 An issue was discovered in Cloud Foundry Foundation Cloud Foundry release versions prior to v245 and cf-mysql-release versions prior to v31. A comman… Cf Mysql Release after 244 Fix from $2,3002017-06-13 CRITICAL 9.8 CVE-2016-8218 An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validati… Cf Release after 203 Fix from $2,3002017-06-13 CRITICAL 9.8 CVE-2017-4992 An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x versions pr… Cf Release after 260 Fix from $2,3002017-06-13 HIGH 8.8 CVE-2017-4973 An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions pr… Cloud Foundry Uaa Bosh after 256 Fix from $1,9502017-06-13 HIGH 7.5 CVE-2017-4972 An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions pr… Cf Release after 256 Fix from $1,9502017-06-13 HIGH 7.5 CVE-2017-4994 An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v263; UAA release 2.x versions prior to v2.7.4.18, 3.6.x versions pr… Cloud Foundry Uaa Bosh after 262 Fix from $1,9502017-06-13 HIGH 7.2 CVE-2017-4991 An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v260; UAA release 2.x versions prior to v2.7.4.16, 3.6.x versions pr… Cf Release after 259 Fix from $1,9502017-06-13 MEDIUM 6.5 CVE-2016-8219 An issue was discovered in Cloud Foundry Foundation cf-release versions prior to 250 and CAPI-release versions prior to 1.12.0. A user with the Space… Capi Release 1.12.0 / 250+ Fix from $1,6002017-06-13 MEDIUM 6.5 CVE-2017-4974 An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v258; UAA release 2.x versions prior to v2.7.4.15, 3.6.x versions pr… Cf Release after 30 Fix from $1,6002017-06-13 MEDIUM 5.9 CVE-2017-4970 An issue was discovered in Cloud Foundry Foundation cf-release v255 and Staticfile buildpack versions v1.4.0 - v1.4.3. A regression introduced in the… Cf Release Mitigation only Fix from $1,6002017-06-13 CRITICAL 9.8 CVE-2016-0761 Cloud Foundry Garden-Linux versions prior to v0.333.0 and Elastic Runtime 1.6.x version prior to 1.6.17 contain a flaw in managing container files du… Garden Linux after 0.332.0 Fix from $2,3002017-05-25 HIGH 8.8 CVE-2015-3191 With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or e… Cf Release after 209 Fix from $1,9502017-05-25 HIGH 8.1 CVE-2016-3084 The UAA reset password flow in Cloud Foundry release v236 and earlier versions, UAA release v3.3.0 and earlier versions, all versions of Login-server… Cloud Foundry Uaa Bosh after 236 Fix from $1,9502017-05-25