CVE-2017-4961

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2017-4961

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-4961.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2017-4961

Published

2017-06-13T06:29:00.393Z

Modified

2026-08-07T11:31:01.354205574Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions. In certain cases an authenticated Director user can provide a malicious checksum that could allow them to escalate their privileges on the Director VM, aka "BOSH Director Shell Injection Vulnerabilities."

Database specific

{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:cloud_foundry:bosh:260.7:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "cloud_foundry:bosh",
            "extracted_events": [
                {
                    "introduced": "260.7"
                },
                {
                    "last_affected": "260.7"
                }
            ]
        }
    ]
}

References

https://www.cloudfoundry.org/cve-2017-4961/

Affected packages

Git / github.com/cloudfoundry/bosh

Affected ranges

Type

GIT

Repo

https://github.com/cloudfoundry/bosh

Events

Introduced

2541d80f528c80f4c2e7675c8efca6065d386639

Last affected

523251dee4c4fae1713a3ec0e150f83900fa1efe

Database specific

Show details

{
    "cpe": [
        "cpe:2.3:a:cloud_foundry:bosh:260:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloud_foundry:bosh:260.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloud_foundry:bosh:260.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloud_foundry:bosh:260.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloud_foundry:bosh:260.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloud_foundry:bosh:260.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloud_foundry:bosh:260.6:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloud_foundry:bosh:261:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloud_foundry:bosh:261.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloud_foundry:bosh:261.2:*:*:*:*:*:*:*"
    ],
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "260"
        },
        {
            "last_affected": "260"
        },
        {
            "introduced": "260.1"
        },
        {
            "last_affected": "260.1"
        },
        {
            "introduced": "260.2"
        },
        {
            "last_affected": "260.2"
        },
        {
            "introduced": "260.3"
        },
        {
            "last_affected": "260.3"
        },
        {
            "introduced": "260.4"
        },
        {
            "last_affected": "260.4"
        },
        {
            "introduced": "260.5"
        },
        {
            "last_affected": "260.5"
        },
        {
            "introduced": "260.6"
        },
        {
            "last_affected": "260.6"
        },
        {
            "introduced": "261"
        },
        {
            "last_affected": "261"
        },
        {
            "introduced": "261.1"
        },
        {
            "last_affected": "261.1"
        },
        {
            "introduced": "261.2"
        },
        {
            "last_affected": "261.2"
        }
    ]
}

Affected versions

Other

260

261

260.*

260.1

260.2

260.3

260.6

261.*

261.1

261.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-4961.json"