CVE-2017-4959
mediumPriorität · verfolgen · 35EPSS 0.013 · 69. PerzentilEUUSEPSS · bewertet 2026-10-28
An issue was discovered in Pivotal PCF Elastic Runtime 1.8.x versions prior to 1.8.29 and 1.9.x versions prior to 1.9.7. Pivotal Cloud Foundry deployments using the Pivotal Account application are vulnerable to a flaw which allows an authorized user to take over the account of another user, causing account lockout and potential escalation of privileges.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.5–8.8
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (37)
Betroffene Produkte und Versionsbereiche.
- pivotal software cloud foundry elastic runtime= 1.8.0nvdUScpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*
- pivotal software cloud foundry elastic runtime= 1.8.1nvdUScpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*
- pivotal software cloud foundry elastic runtime= 1.8.10nvdUScpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*
- pivotal software cloud foundry elastic runtime= 1.8.11nvdUScpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*
- pivotal software cloud foundry elastic runtime= 1.8.12nvdUScpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*
- pivotal software cloud foundry elastic runtime= 1.8.13nvdUScpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*
- pivotal software cloud foundry elastic runtime= 1.8.14nvdUScpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*
- pivotal software cloud foundry elastic runtime= 1.8.15nvdUScpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*
- pivotal software cloud foundry elastic runtime= 1.8.16nvdUScpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*
- pivotal software cloud foundry elastic runtime= 1.8.17nvdUScpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*
- pivotal software cloud foundry elastic runtime= 1.8.18nvdUScpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*
- pivotal software cloud foundry elastic runtime= 1.8.19nvdUScpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*
- pivotal software cloud foundry elastic runtime= 1.8.2nvdUScpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*
- pivotal software cloud foundry elastic runtime= 1.8.20nvdUScpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*
- pivotal software cloud foundry elastic runtime= 1.8.21nvdUScpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*
- pivotal software cloud foundry elastic runtime= 1.8.22nvdUScpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*
- pivotal software cloud foundry elastic runtime= 1.8.23nvdUScpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*
- pivotal software cloud foundry elastic runtime= 1.8.24nvdUScpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*
- pivotal software cloud foundry elastic runtime= 1.8.25nvdUScpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (6)
Externe Belege — Patches, Meldungen, Analysen.
- https://pivotal.io/security/cve-2017-4959cnnvd
- https://www.securityfocus.com/bid/96218cnnvd
- http://www.securityfocus.com/bid/96218enisa_euvd
- https://pivotal.io/security/cve-2017-4959enisa_euvd
- http://www.securityfocus.com/bid/96218Third Party AdvisoryVDB Entrynvd
- https://pivotal.io/security/cve-2017-4959Vendor Advisorynvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan