High severity8.8NVD Advisory· Published Nov 27, 2017· Updated Jun 17, 2026

CVE-2017-8038

Description

In Cloud Foundry Foundation Credhub-release version 1.1.0, access control lists (ACLs) enforce whether an authenticated user can perform an operation on a credential. For installations using ACLs, the ACL was bypassed for the CredHub interpolate endpoint, allowing authenticated applications to view any credential within the CredHub installation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cloudfoundry/Credhub Release
cpe:2.3:a:pivotal_software:credhub-release:1.1.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

www.cloudfoundry.org/cve-2017-8038/nvdIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000