CVE-2017-8034 | BDVDB-2026-87774 Detail

Cloud Foundry

Description#

The Cloud Controller and Router in Cloud Foundry (CAPI-release capi versions prior to v1.32.0, Routing-release versions prior to v0.159.0, CF-release versions prior to v267) do not validate the issuer on JSON Web Tokens (JWTs) from UAA. With certain multi-zone UAA configurations, zone administrators are able to escalate their privileges.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.cloudfoundry.org/cve-2017-8034/

Exploit#

No public exploit known

History#

Version 12017-07-17Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.