CVE-2017-8037

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2017-8037

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-8037.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2017-8037

Published

2017-08-21T22:29:00.183Z

Modified

2026-07-08T05:50:31.000626479Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

[none]

Details

In Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.38.0 and cf-release versions after v244 and prior to v270, there is an incomplete fix for CVE-2017-8035. If you took steps to remediate CVE-2017-8035 you should also upgrade to fix this CVE. A carefully crafted CAPI request from a Space Developer can allow them to gain access to files on the Cloud Controller VM for that installation, aka an Information Leak / Disclosure.

Database specific

{
    "unresolved_ranges": [
        {
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:a:cloudfoundry:capi-release:1.7.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "cloudfoundry:capi-release",
            "extracted_events": [
                {
                    "introduced": "1.7.0"
                },
                {
                    "last_affected": "1.7.0"
                }
            ]
        },
        {
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:a:cloudfoundry:cf-release:245:*:*:*:*:*:*:*",
                "cpe:2.3:a:cloudfoundry:cf-release:246:*:*:*:*:*:*:*",
                "cpe:2.3:a:cloudfoundry:cf-release:247:*:*:*:*:*:*:*",
                "cpe:2.3:a:cloudfoundry:cf-release:248:*:*:*:*:*:*:*",
                "cpe:2.3:a:cloudfoundry:cf-release:249:*:*:*:*:*:*:*",
                "cpe:2.3:a:cloudfoundry:cf-release:250:*:*:*:*:*:*:*",
                "cpe:2.3:a:cloudfoundry:cf-release:251:*:*:*:*:*:*:*",
                "cpe:2.3:a:cloudfoundry:cf-release:252:*:*:*:*:*:*:*",
                "cpe:2.3:a:cloudfoundry:cf-release:253:*:*:*:*:*:*:*",
                "cpe:2.3:a:cloudfoundry:cf-release:254:*:*:*:*:*:*:*",
                "cpe:2.3:a:cloudfoundry:cf-release:255:*:*:*:*:*:*:*",
                "cpe:2.3:a:cloudfoundry:cf-release:256:*:*:*:*:*:*:*",
                "cpe:2.3:a:cloudfoundry:cf-release:257:*:*:*:*:*:*:*",
                "cpe:2.3:a:cloudfoundry:cf-release:258:*:*:*:*:*:*:*",
                "cpe:2.3:a:cloudfoundry:cf-release:259:*:*:*:*:*:*:*",
                "cpe:2.3:a:cloudfoundry:cf-release:260:*:*:*:*:*:*:*",
                "cpe:2.3:a:cloudfoundry:cf-release:261:*:*:*:*:*:*:*",
                "cpe:2.3:a:cloudfoundry:cf-release:262:*:*:*:*:*:*:*",
                "cpe:2.3:a:cloudfoundry:cf-release:263:*:*:*:*:*:*:*",
                "cpe:2.3:a:cloudfoundry:cf-release:264:*:*:*:*:*:*:*",
                "cpe:2.3:a:cloudfoundry:cf-release:265:*:*:*:*:*:*:*",
                "cpe:2.3:a:cloudfoundry:cf-release:266:*:*:*:*:*:*:*",
                "cpe:2.3:a:cloudfoundry:cf-release:267:*:*:*:*:*:*:*",
                "cpe:2.3:a:cloudfoundry:cf-release:268:*:*:*:*:*:*:*",
                "cpe:2.3:a:cloudfoundry:cf-release:269:*:*:*:*:*:*:*"
            ],
            "vendor_product": "cloudfoundry:cf-release",
            "extracted_events": [
                {
                    "introduced": "245"
                },
                {
                    "last_affected": "245"
                },
                {
                    "introduced": "246"
                },
                {
                    "last_affected": "246"
                },
                {
                    "introduced": "247"
                },
                {
                    "last_affected": "247"
                },
                {
                    "introduced": "248"
                },
                {
                    "last_affected": "248"
                },
                {
                    "introduced": "249"
                },
                {
                    "last_affected": "249"
                },
                {
                    "introduced": "250"
                },
                {
                    "last_affected": "250"
                },
                {
                    "introduced": "251"
                },
                {
                    "last_affected": "251"
                },
                {
                    "introduced": "252"
                },
                {
                    "last_affected": "252"
                },
                {
                    "introduced": "253"
                },
                {
                    "last_affected": "253"
                },
                {
                    "introduced": "254"
                },
                {
                    "last_affected": "254"
                },
                {
                    "introduced": "255"
                },
                {
                    "last_affected": "255"
                },
                {
                    "introduced": "256"
                },
                {
                    "last_affected": "256"
                },
                {
                    "introduced": "257"
                },
                {
                    "last_affected": "257"
                },
                {
                    "introduced": "258"
                },
                {
                    "last_affected": "258"
                },
                {
                    "introduced": "259"
                },
                {
                    "last_affected": "259"
                },
                {
                    "introduced": "260"
                },
                {
                    "last_affected": "260"
                },
                {
                    "introduced": "261"
                },
                {
                    "last_affected": "261"
                },
                {
                    "introduced": "262"
                },
                {
                    "last_affected": "262"
                },
                {
                    "introduced": "263"
                },
                {
                    "last_affected": "263"
                },
                {
                    "introduced": "264"
                },
                {
                    "last_affected": "264"
                },
                {
                    "introduced": "265"
                },
                {
                    "last_affected": "265"
                },
                {
                    "introduced": "266"
                },
                {
                    "last_affected": "266"
                },
                {
                    "introduced": "267"
                },
                {
                    "last_affected": "267"
                },
                {
                    "introduced": "268"
                },
                {
                    "last_affected": "268"
                },
                {
                    "introduced": "269"
                },
                {
                    "last_affected": "269"
                }
            ]
        }
    ]
}

References

Affected packages

Git / github.com/cloudfoundry/capi-release

Affected ranges

Type

GIT

Repo

https://github.com/cloudfoundry/capi-release

Events

Introduced

c952006df4174249d91e296c799ab54361822477

Last affected

0a024c74ec9b3080a99a9ea5cebaa2c0b4aaf1bf

Database specific

{
    "cpe": [
        "cpe:2.3:a:cloudfoundry:capi-release:1.7.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.8.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.9.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.10.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.11.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.12.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.13.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.14.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.15.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.16.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.17.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.18.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.19.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.20.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.21.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.22.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.23.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.24.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.25.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.26.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.27.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.28.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.29.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.30.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.31.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.32.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.33.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.34.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.35.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.36.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:cloudfoundry:capi-release:1.37.0:*:*:*:*:*:*:*"
    ],
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "1.7.0"
        },
        {
            "last_affected": "1.7.0"
        },
        {
            "introduced": "1.8.0"
        },
        {
            "last_affected": "1.8.0"
        },
        {
            "introduced": "1.9.0"
        },
        {
            "last_affected": "1.9.0"
        },
        {
            "introduced": "1.10.0"
        },
        {
            "last_affected": "1.10.0"
        },
        {
            "introduced": "1.11.0"
        },
        {
            "last_affected": "1.11.0"
        },
        {
            "introduced": "1.12.0"
        },
        {
            "last_affected": "1.12.0"
        },
        {
            "introduced": "1.13.0"
        },
        {
            "last_affected": "1.13.0"
        },
        {
            "introduced": "1.14.0"
        },
        {
            "last_affected": "1.14.0"
        },
        {
            "introduced": "1.15.0"
        },
        {
            "last_affected": "1.15.0"
        },
        {
            "introduced": "1.16.0"
        },
        {
            "last_affected": "1.16.0"
        },
        {
            "introduced": "1.17.0"
        },
        {
            "last_affected": "1.17.0"
        },
        {
            "introduced": "1.18.0"
        },
        {
            "last_affected": "1.18.0"
        },
        {
            "introduced": "1.19.0"
        },
        {
            "last_affected": "1.19.0"
        },
        {
            "introduced": "1.20.0"
        },
        {
            "last_affected": "1.20.0"
        },
        {
            "introduced": "1.21.0"
        },
        {
            "last_affected": "1.21.0"
        },
        {
            "introduced": "1.22.0"
        },
        {
            "last_affected": "1.22.0"
        },
        {
            "introduced": "1.23.0"
        },
        {
            "last_affected": "1.23.0"
        },
        {
            "introduced": "1.24.0"
        },
        {
            "last_affected": "1.24.0"
        },
        {
            "introduced": "1.25.0"
        },
        {
            "last_affected": "1.25.0"
        },
        {
            "introduced": "1.26.0"
        },
        {
            "last_affected": "1.26.0"
        },
        {
            "introduced": "1.27.0"
        },
        {
            "last_affected": "1.27.0"
        },
        {
            "introduced": "1.28.0"
        },
        {
            "last_affected": "1.28.0"
        },
        {
            "introduced": "1.29.0"
        },
        {
            "last_affected": "1.29.0"
        },
        {
            "introduced": "1.30.0"
        },
        {
            "last_affected": "1.30.0"
        },
        {
            "introduced": "1.31.0"
        },
        {
            "last_affected": "1.31.0"
        },
        {
            "introduced": "1.32.0"
        },
        {
            "last_affected": "1.32.0"
        },
        {
            "introduced": "1.33.0"
        },
        {
            "last_affected": "1.33.0"
        },
        {
            "introduced": "1.34.0"
        },
        {
            "last_affected": "1.34.0"
        },
        {
            "introduced": "1.35.0"
        },
        {
            "last_affected": "1.35.0"
        },
        {
            "introduced": "1.36.0"
        },
        {
            "last_affected": "1.36.0"
        },
        {
            "introduced": "1.37.0"
        },
        {
            "last_affected": "1.37.0"
        }
    ]
}

Affected versions

1.*

1.10.0

1.11.0

1.12.0

1.13.0

1.14.0

1.15.0

1.16.0

1.17.0

1.18.0

1.19.0

1.20.0

1.21.0

1.22.0

1.23.0

1.24.0

1.25.0

1.26.0

1.27.0

1.28.0

1.29.0

1.30.0

1.31.0

1.32.0

1.33.0

1.34.0

1.35.0

1.36.0

1.37.0

1.7.0

1.8.0

1.9.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-8037.json"