CVE-2017-4961

See a problem?
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-4961
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-4961.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-4961
Published
2017-06-13T06:29:00Z
Modified
2024-09-03T01:51:58.294168Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions. In certain cases an authenticated Director user can provide a malicious checksum that could allow them to escalate their privileges on the Director VM, aka "BOSH Director Shell Injection Vulnerabilities."

References

Affected packages

Git / github.com/cloudfoundry/bosh

Affected ranges

Type
GIT
Repo
https://github.com/cloudfoundry/bosh
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1d9e94535d1610a3b7a3cf8ad18f03e95f4f116a
Last affected
2541d80f528c80f4c2e7675c8efca6065d386639
Last affected
34e8eee8ecb1846b60f28495ce91c4fb3f3a75b7
Last affected
482da3cf8af4ccec0d29373fc57345e3315fb49d
Last affected
523251dee4c4fae1713a3ec0e150f83900fa1efe
Last affected
68c1c55ccfae9d69f9800b7bec6ea67acb1040a1
Last affected
f419326cad3e642ed4a5e6d893688c0766d7b259
Last affected
f98ec486516cc04473c1948abe167f373819c381

Affected versions

Other

jenkins-promote_artifacts-100
jenkins-promote_artifacts-101
jenkins-promote_artifacts-102
jenkins-promote_artifacts-103
jenkins-promote_artifacts-104
jenkins-promote_artifacts-105
jenkins-promote_artifacts-106
jenkins-promote_artifacts-107
jenkins-promote_artifacts-22
jenkins-promote_artifacts-23
jenkins-promote_artifacts-24
jenkins-promote_artifacts-25
jenkins-promote_artifacts-26
jenkins-promote_artifacts-27
jenkins-promote_artifacts-28
jenkins-promote_artifacts-29
jenkins-promote_artifacts-30
jenkins-promote_artifacts-31
jenkins-promote_artifacts-32
jenkins-promote_artifacts-33
jenkins-promote_artifacts-34
jenkins-promote_artifacts-35
jenkins-promote_artifacts-36
jenkins-promote_artifacts-37
jenkins-promote_artifacts-38
jenkins-promote_artifacts-39
jenkins-promote_artifacts-40
jenkins-promote_artifacts-41
jenkins-promote_artifacts-42
jenkins-promote_artifacts-43
jenkins-promote_artifacts-44
jenkins-promote_artifacts-45
jenkins-promote_artifacts-47
jenkins-promote_artifacts-48
jenkins-promote_artifacts-49
jenkins-promote_artifacts-50
jenkins-promote_artifacts-51
jenkins-promote_artifacts-52
jenkins-promote_artifacts-53
jenkins-promote_artifacts-54
jenkins-promote_artifacts-55
jenkins-promote_artifacts-56
jenkins-promote_artifacts-57
jenkins-promote_artifacts-58
jenkins-promote_artifacts-59
jenkins-promote_artifacts-60
jenkins-promote_artifacts-61
jenkins-promote_artifacts-62
jenkins-promote_artifacts-63
jenkins-promote_artifacts-64
jenkins-promote_artifacts-65
jenkins-promote_artifacts-66
jenkins-promote_artifacts-67
jenkins-promote_artifacts-68
jenkins-promote_artifacts-69
jenkins-promote_artifacts-70
jenkins-promote_artifacts-71
jenkins-promote_artifacts-72
jenkins-promote_artifacts-73
jenkins-promote_artifacts-74
jenkins-promote_artifacts-75
jenkins-promote_artifacts-76
jenkins-promote_artifacts-77
jenkins-promote_artifacts-78
jenkins-promote_artifacts-79
jenkins-promote_artifacts-80
jenkins-promote_artifacts-81
jenkins-promote_artifacts-82
jenkins-promote_artifacts-83
jenkins-promote_artifacts-84
jenkins-promote_artifacts-85
jenkins-promote_artifacts-86
jenkins-promote_artifacts-87
jenkins-promote_artifacts-88
jenkins-promote_artifacts-89
jenkins-promote_artifacts-90
jenkins-promote_artifacts-91
jenkins-promote_artifacts-92
jenkins-promote_artifacts-93
jenkins-promote_artifacts-94
jenkins-promote_artifacts-95
jenkins-promote_artifacts-96
jenkins-promote_artifacts-97
jenkins-promote_artifacts-98
jenkins-promote_artifacts-99
scotty_09012012
stable-1087
stable-1090
stable-1114
stable-1116
stable-1117
stable-1134
stable-1138
stable-1139
stable-1141
stable-1142
stable-1145
stable-1148
stable-1152
stable-1153
stable-1154
stable-1168
stable-1172
stable-1173
stable-1176
stable-1177
stable-1178
stable-1179
stable-1181
stable-1190
stable-1193
stable-1209
stable-1210
stable-1211
stable-1215
stable-1226
stable-1244
stable-1246
stable-1248
stable-1250
stable-1252
stable-1256
stable-1259
stable-1260
stable-1266
stable-1269
stable-1274
stable-1284
stable-1302
stable-1305
stable-1306
stable-1318
stable-1319
stable-1320
stable-1323
stable-1324
stable-1326
stable-1327
stable-1328
stable-1330
stable-1332
stable-1333
stable-1335
stable-1336
stable-1337
stable-1339
stable-1340
stable-1341
stable-1345
stable-1364
stable-1365
stable-1374
stable-1376
stable-1381
stable-1390
stable-1391
stable-1435
stable-1436
stable-1471
stable-1478
stable-1484
stable-1492
stable-1504
stable-1525
stable-1623
stable-1633
stable-1639
stable-1644
stable-1657
stable-1722
stable-1744
stable-1750
stable-1761
stable-1777
stable-1782
stable-1798
stable-1836
stable-1840
stable-1858
stable-1868
stable-1975
stable-2005
stable-2063
stable-2068
stable-2086
stable-2089
stable-2121
stable-2124
stable-2129
stable-2131
stable-2150
stable-2168
stable-2175
stable-2200
stable-2291
stable-2311
stable-2334
stable-2341
stable-2347
stable-2354
stable-2355
stable-2361
stable-2366
stable-2372
stable-2375
stable-2384
stable-2398
stable-2409
stable-2411
stable-2416
stable-2427
stable-2446
stable-2448
stable-2479
stable-2513
stable-2524
stable-2531
stable-2534
stable-2537
stable-2539
stable-2546
stable-2549
stable-2559
stable-2560
stable-2576
stable-2577
stable-2578
stable-2579
stable-2583
stable-2596
stable-2597
stable-2603
stable-2605
stable-2606
stable-2611
stable-2619
stable-2624
stable-2640
stable-2641
stable-2652
stable-2657
stable-2669
stable-2671
stable-2681
stable-2682
stable-2685
stable-2686
stable-2690
stable-2693
stable-2697
stable-2707
stable-2710
stable-2717
stable-2719
stable-2732
stable-2739
stable-2743
stable-2744
stable-2745
stable-2748
stable-2749
stable-2751
stable-2754
stable-2765
stable-2768
stable-2776
stable-2778
stable-2780
stable-2781
stable-2785
stable-2786
stable-2787
stable-2788
stable-2789
stable-2792
stable-2797
stable-2798
stable-2801
stable-2807
stable-2809
stable-2810
stable-2811
stable-2818
stable-2820
stable-2824
stable-2827
stable-2829
stable-2830
stable-2831
stable-2839
stable-2840
stable-2847
stable-2849
stable-2852
stable-2855
stable-2858
stable-2859
stable-2862
stable-2865
stable-2881
stable-2889
stable-2891
stable-2902
stable-2905
stable-2915
stable-2922
stable-2941
stable-2949
stable-2950
stable-2957
stable-2962
stable-2968
stable-2969
stable-2972
stable-2975
stable-2976
stable-2977
stable-2978
stable-2980
stable-2981
stable-2982
stable-2983
stable-2986
stable-2989
stable-2992
stable-2999
stable-3000
stable-3001
stable-3003
stable-3004
stable-3008
stable-3010
stable-3012
stable-3016
stable-3019
stable-3022
stable-3025
stable-3026
stable-3029
stable-3030
stable-3031
stable-3033
stable-3039
stable-3042
stable-3048
stable-3050
stable-3056
stable-3058
stable-3062
stable-3063
stable-3067
stable-3068
stable-3069
stable-3071
stable-3072
stable-3074
stable-3087
stable-3088
stable-3091
stable-3093
stable-3094
stable-3098
stable-3100
stable-3104
stable-3112
stable-3115
stable-3120
stable-3122
stable-3123
stable-3125
stable-3126
stable-3130
stable-3137
stable-3138
stable-3139
stable-3140
stable-3142
stable-3143
stable-3144
stable-3145
stable-3146
stable-3147
stable-3148
stable-3149
stable-3153
stable-3155
stable-3156
stable-3157
stable-3160
stable-3163
stable-3165
stable-3167
stable-3169
stable-3173
stable-3177
stable-3178
stable-3181
stable-3184
stable-3189
stable-3191
stable-3192
stable-3196
stable-3197
stable-3200
stable-3202
stable-3213
stable-3215
stable-3232
stable-3262
stable-3302
stable-3303
stable-3306
stable-3308
stable-3309
stable-3312
v258
v259
v260

stable-3146.*

stable-3146.3

stable-3184.*

stable-3184.1

stable-3197.*

stable-3197.1

stable-3215.*

stable-3215.1
stable-3215.2
stable-3215.3
stable-3215.4
stable-3215.5

stable-3232.*

stable-3232.1
stable-3232.2
stable-3232.3
stable-3232.4
stable-3232.6
stable-3232.9

stable-3262.*

stable-3262.1
stable-3262.3

v260.*

v260.1
v260.2
v260.3
v260.4
v260.5
v260.6