VYPR
← All advisories
High severity8.8NVD Advisory· Published Jun 13, 2017· Updated May 13, 2026

CVE-2017-4961

CVE-2017-4961

Description

An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions. In certain cases an authenticated Director user can provide a malicious checksum that could allow them to escalate their privileges on the Director VM, aka "BOSH Director Shell Injection Vulnerabilities."

Affected products

11
  • Cloud Foundry/Bosh11 versions
    cpe:2.3:a:cloud_foundry:bosh:260:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:cloud_foundry:bosh:260:*:*:*:*:*:*:*
    • cpe:2.3:a:cloud_foundry:bosh:260.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cloud_foundry:bosh:260.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cloud_foundry:bosh:260.3:*:*:*:*:*:*:*
    • cpe:2.3:a:cloud_foundry:bosh:260.4:*:*:*:*:*:*:*
    • cpe:2.3:a:cloud_foundry:bosh:260.5:*:*:*:*:*:*:*
    • cpe:2.3:a:cloud_foundry:bosh:260.6:*:*:*:*:*:*:*
    • cpe:2.3:a:cloud_foundry:bosh:260.7:*:*:*:*:*:*:*
    • cpe:2.3:a:cloud_foundry:bosh:261:*:*:*:*:*:*:*
    • cpe:2.3:a:cloud_foundry:bosh:261.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cloud_foundry:bosh:261.2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.