CVE-2017-8032

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-8032
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-8032.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-8032
Aliases
Published
2017-07-10T20:29:00.860Z
Modified
2026-03-14T09:27:11.420748Z
Severity
  • 6.6 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

In Cloud Foundry cf-release versions prior to v264; UAA release all versions of UAA v2.x.x, 3.6.x versions prior to v3.6.13, 3.9.x versions prior to v3.9.15, 3.20.x versions prior to v3.20.0, and other versions prior to v4.4.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.17, 24.x versions prior to v24.12. 30.x versions prior to 30.5, and other versions prior to v41, zone administrators are allowed to escalate their privileges when mapping permissions for an external provider.

References

Affected packages

Git / github.com/cloudfoundry/cf-release

Affected ranges

Type
GIT
Repo
https://github.com/cloudfoundry/cf-release
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
44f00b3bf9479d462d35ab5e738b114a9ee6cc81
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "263"
        }
    ]
}
Type
GIT
Repo
https://github.com/cloudfoundry/uaa
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7640c1433ec193b6696ee5e37a524a353fb3053e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
79188ac64074380c3ac5ff8dc32468e73e1c4c4b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
868d1b66623c20290f87c424a27cbf12220ef1fe
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
848792d60da36dc3cca6e4f98fc26c32ff1ad852
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5260b65c7976c5214b7b9104573971285ee747e3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6f4197812dcb5da43b5c6bc2bed119c7cb51a649
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
07f14654fc27d74fbae8c8caccd2c08b6129d1b6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
cb1cc7709fef43aa64933754b0e3f4fc2a4f46bd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7964980977c0e44eb42d264a6a1e4e9957b50d7c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3dd96319b33069208446af323e47b818b4b39a2e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a54d147a0a0f2bad89b3cb768338acd3009cc815
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f0b459ddf0cc4fd738a412ce6586f24586266375
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9bf7f52cbf5070f84110916f849f101b4cb87da7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fbec8291ff7c872b628dc3c648c8bfd3bb2e9c40
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e77d4a20b321da8d958c2dfba86146f58e20e702
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7dcb384183b4bb50bc30f1671d5bdeb6fdb01099
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e0ad8af3ff5ccda7ec5d3cd393ba21ed4245cdb7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2fbc8f61e77d7d648330ee203d36b001d801a50e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
242d89aef305d051b429f16a3bf761049f07cc75
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
be5cd3c1eb15c4af83265de3efc45f090b00a55e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a2b00c8b5a0d4bfba14318e3bfac506c2e2949d0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
da04534573a6d5a53ad014f84bf5f855e0b2c6c0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
74e080e1d99a63c8b29656189198fc743e95455e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ec11979e3e127c9fd89853a39ef79cdbf2cae2be
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
83e137053564ab2afefb7dffc589bca936fe7757
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9d85a8a425e1ca3c17463d78dd67ae852539f0ce
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c751caff52bc03366eae95db385511303fb5e42a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4b22749f89bd02ee4fca0c6b1873754ef83380fe
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3d42346829976108a79f75cc7c76ef44836664d1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
81134d6a574b91a007e429a11148b81b715b2c08
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c1b98ac8b7b38ffcaadcb24febff435680fcc982
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
238ba6077aea9d535fe95b080f65a55a98ece7fe
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7623ebebfcb3864a979d769c125efffa82a292a4
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
69fc38968ecf6d0748acbfec7aac9ca32cf4ed3d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
565bfebb000034c84d7853d4f9d387a8fc84c4bb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9e384778cbbb7f4aca143874cc3eb4dfc697ca8b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d75d7efa6328e04a4180f7ee18e1307dfa28dc2f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a2be849438dcb8ded19504742c0d8903eeef0418
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b339df7cc4eb182c37deb9a9057093c2eb19e135
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
896455cacb36cdb349f14b493fc656cb12985ada
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ffed4307232dc238ca9527716d176e68d9a25ce0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9b5866ce717ed4c783b9dd3c6dae84c1ccdc707d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
60e113eebe5eea4e1533dace812278b094dd35e1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c0f3471997118e8be5abb272d3b7ceeea3c6d46a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
acbc2bbf50068532d5a39a3a95163cb01ea14b25
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
99af707ee74042406449c8aa5081d2acb03a6669
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.5.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.7.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.7.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.7.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.7.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.7.4.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.7.4.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.7.4.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.7.4.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.7.4.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.7.4.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.7.4.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.7.4.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.7.4.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.7.4.11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.7.4.12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.7.4.13"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.7.4.14"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.7.4.15"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.7.4.16"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.6.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.6.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.6.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.6.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.6.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.6.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.6.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.6.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.6.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.6.10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.6.11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.6.12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.9.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.9.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.9.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.9.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.9.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.9.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.9.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.9.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.9.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.9.10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.9.11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.9.12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.9.13"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.9.14"
        }
    ]
}
Type
GIT
Repo
https://github.com/cloudfoundry/uaa-release
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5147756aaa0e23c0fac49ad8b300245171b3ab86
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9e9bc18c684b92f99e5ff97b857729ebb657f993
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a32cb321fad9aacc1423f0b617699ea639037786
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ba601cfabca2cc9524888dc624b4bee8d4b46472
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
aaab7a7d472e86d3dd2afb50187008a1852e45ac
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5c023c50a25a0b970595fa165a851f57cd0092b7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fd97e7b7e21ffbc9f7ab3830b39016f08d644311
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
63e2ef4b54ca1cb3c462196053ea4b3324c9578a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
63e2ef4b54ca1cb3c462196053ea4b3324c9578a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
63e2ef4b54ca1cb3c462196053ea4b3324c9578a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ce61532638edae69f98687163d33f08e8022b97f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
747cd9f9d22a2df42787baa85fa16ece5e2874ea
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7279880d7387b610d6ccf775477b07cae12e149e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
214e932a692ba4ec83a23b35f829324e1025a2e7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ae9cef18a0a6d5222b0c2a058b76e5061e4e1730
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
15fb9b6a4798ce04c435cc4a6494e5dac795aa51
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1fafc18fa168044216d7ad383a45c00ea195ce6a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
99f08c77b1f962f4db9b8e05666245d20037402a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d091d849287d64a790237ae8e3e3e535236aae77
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fbd252040ba68495902876096dd447452a26bf64
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
acff6687d934bf827b809e108c55963a08463f30
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c8e3c41b598e988d7c60551b4fd5ec9b182c062b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5d5ec0136d774da26566ca02f3b25648fd90433a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e19510139156fcef72e9f7453979ec75168e34c9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
53d1d74f60c738ef1ecc81a463788ee3eb65c437
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0e634b41cc5ea5bf73811a0317945002ab3c403f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3077d1c01c9489a941278d90ea88973caad4e14a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
708a70295a2f3c3dd263229a22fa5f6c78331e07
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ad94351121330db25bd41da1d679a0964c79fca5
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8c5ccff535f9fb3b924a3d1c52f795b0f8242054
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7ddaaef684e51ca03c86a34361e704323419d5aa
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
cc0bff967af88f05814e5d3afe2d434a4219c4d0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
87308108195b925a3076185fdcb83bc4cea02471
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3371c54ebf9473487e32fdf5e831ae21d8df3246
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "40"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.13"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.14"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.15"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.16"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "24"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "24.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "24.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "24.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "24.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "24.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "24.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "24.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "24.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "24.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "24.10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "24.11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "30"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "30.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "30.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "30.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "30.4"
        }
    ]
}

Affected versions

Other
-
ci-upgrade
lenient_hybrid_flow
list
log
scotty_09012012
travis-success-1475
travis-success-1478
travis-success-1497
v
v10
v100
v101
v102
v103
v104
v105
v106
v107
v108
v109
v11
v110
v111
v112
v113
v114
v115
v116
v117
v118
v119
v119-fixed
v12
v120
v121
v122
v123
v124
v125
v126
v127
v128
v129
v13
v130
v131
v132
v133
v134
v135
v136
v137
v138
v139
v14
v140
v141
v142
v143
v144
v145
v146
v147
v148
v149
v15
v150
v151
v152
v153
v154
v155
v156
v157
v158
v159
v16
v160
v161
v162
v163
v164
v165
v166
v168
v169
v17
v170
v171
v172
v173
v175
v176
v177
v178
v179
v18
v180
v182
v183
v186
v187
v188
v189
v19
v190
v191
v192
v193
v194
v195
v196
v197
v198
v199
v2
v20
v200
v201
v202
v203
v204
v205
v206
v207
v208
v209
v21
v210
v211
v212
v213
v214
v215
v217
v218
v219
v22
v220
v221
v222
v223
v224
v225
v226
v227
v228
v229
v23
v230
v231
v232
v233
v234
v235
v236
v237
v238
v239
v24
v240
v241
v242
v243
v244
v245
v246
v247
v248
v249
v25
v250
v251
v252
v253
v254
v255
v256
v257
v258
v259
v26
v260
v261
v262
v263
v27
v28
v3
v30
v31
v33
v39
v4
v40
v5
v6
v68
v69
v7
v70
v71
v72
v73
v74
v75
v76
v77
v78
v79
v8
v80
v81
v82
v83
v84
v85
v86
v87
v88
v89
v9
v90
v91
v92
v93
v94
v95
v95-fixed
v96
v97
v98
v99
works-for-us
1.*
1.0.1
1.0.2
1.0.3
1.1
1.1.1
1.1.2
1.10
1.11
1.2.0
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.3.1
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.5.0
1.5.2
1.5.2.1
1.5.3
1.5.4
1.5.4.1
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.8.3
1.9.0
1.9.1
2.*
2.0.0
2.0.1
2.0.2
2.0.3
2.1.0
2.2.0
2.2.4
2.2.4.1
2.2.5
2.2.6
2.3.0
2.3.1
2.3.1.1
2.4.0
2.4.1
2.5.0
2.5.1
2.5.2
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0.1
2.7.0.2
2.7.0.3
2.7.1
rc145.*
rc145.0
v11.*
v11.1
v11.2
v11.3
v12.*
v12.1
v12.2
v12.3
v13.*
v13.1
v30.*
v30.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-8032.json"