CVE-2017-8038 | BDVDB-2026-93427 Detail

Credhub Credhub-release version 1.1.0 only

Description#

In Cloud Foundry Foundation Credhub-release version 1.1.0, access control lists (ACLs) enforce whether an authenticated user can perform an operation on a credential. For installations using ACLs, the ACL was bypassed for the CredHub interpolate endpoint, allowing authenticated applications to view any credential within the CredHub installation.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.cloudfoundry.org/cve-2017-8038/

Exploit#

No public exploit known

History#

Version 12017-11-27Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.