CVE-2017-4969 — Cf-release vulnerability

4 documents4 sources

Severity

6.5MEDIUMNVD

EPSS

0.4%

top 40.35%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Cloudfoundry Cf-release

Timeline

PublishedApr 20

Latest updateMay 13

Description

The Cloud Controller in Cloud Foundry cf-release versions prior to v255 allows authenticated developer users to exceed memory and disk quotas for tasks.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages1 packages

▶NVDcloudfoundry/cf-release254

🔴Vulnerability Details

GHSA

GHSA-6cf2-hv75-pxf8: The Cloud Controller in Cloud Foundry cf-release versions prior to v255 allows authenticated developer users to exceed memory and disk quotas for task↗2022-05-13

▶

CVEList

CVE-2017-4969: The Cloud Controller in Cloud Foundry cf-release versions prior to v255 allows authenticated developer users to exceed memory and disk quotas for task↗2017-04-20

▶