{"id":"CVE-2017-8048","published":"2017-10-03T07:00:00Z","modified":"2024-08-05T16:19:29Z","title":"In Cloud Foundry capi-release versions 1.33.0 and later, prior to 1.42.0 and cf-release versions 268 and later, prior…","vendor":null,"product":null,"tier":"tail","description":{"text":"In Cloud Foundry capi-release versions 1.33.0 and later, prior to 1.42.0 and cf-release versions 268 and later, prior to 274, the original fix for CVE-2017-8033 introduces an API regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushing a specially crafted application. NOTE: 274 resolves the vulnerability but has a serious bug that is fixed in 275.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.01245,"percentile":0.69178,"provenance":"source"},"cwes":[],"references":[{"url":"https://www.cloudfoundry.org/cve-2017-8048/","tags":["x_refsource_CONFIRM"]}],"priority":{"score":13.8,"factors":[{"name":"EPSS percentile","points":13.84}]},"affectedVersions":[{"vendor":"n/a","product":"Cloud Controller VM capi-release versions 1.33.0 and later, prior to 1.42.0, cf-release versions 268 and later, prior to 274","versions":["Cloud Controller VM capi-release versions 1.33.0 and later, prior to 1.42.0, cf-release versions 268 and later, prior to 274"]}],"euvd":{"id":"EUVD-2017-17012","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-cve-2017-8036-family-cve-2017-8036","parents":[{"from":"CVE-2017-8033","to":"CVE-2017-8048","relation":"regression","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"regression","quote":"…se versions 1.33.0 and later, prior to 1.42.0 and cf-release versions 268 and later, prior to 274, the original fix for CVE-2017-8033 introduces an API regression that allows a space developer to execute arbitrary code on the Cloud Contro…","from":"CVE.org","in":"CVE-2017-8048"}]}]}}