{"id":"CVE-2017-8036","published":"2017-07-24T18:00:00Z","modified":"2024-08-05T16:19:29Z","title":"An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release version 1.33.0 (only)","vendor":null,"product":null,"tier":"tail","description":{"text":"An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release version 1.33.0 (only). The original fix for CVE-2017-8033 included in CAPI-release 1.33.0 introduces a regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushing a specially crafted application.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.01425,"percentile":0.72837,"provenance":"source"},"cwes":[],"references":[{"url":"https://www.cloudfoundry.org/cve-2017-8036/","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/100002","tags":["vdb-entry","x_refsource_BID"]}],"priority":{"score":14.6,"factors":[{"name":"EPSS percentile","points":14.57}]},"affectedVersions":[{"vendor":"n/a","product":"Cloud Controller API CAPI-release version 1.33.0 only","versions":["Cloud Controller API CAPI-release version 1.33.0 only"]}],"euvd":{"id":"EUVD-2017-17003","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-cve-2017-8036-family-cve-2017-8036","parents":[{"from":"CVE-2017-8033","to":"CVE-2017-8036","relation":"regression","confidence":"high","kind":"lineage","orderedBy":"description","evidence":[{"kind":"text","provenance":"source","relation":"regression","quote":"The original fix for CVE-2017-8033 included in CAPI-release 1.33.0 introduces a regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushing a specially crafted application.","from":"CVE.org","in":"CVE-2017-8036"}]}]}}