High severity8.8NVD Advisory· Published Nov 27, 2017· Updated May 13, 2026
CVE-2017-8038
CVE-2017-8038
Description
In Cloud Foundry Foundation Credhub-release version 1.1.0, access control lists (ACLs) enforce whether an authenticated user can perform an operation on a credential. For installations using ACLs, the ACL was bypassed for the CredHub interpolate endpoint, allowing authenticated applications to view any credential within the CredHub installation.
Affected products
2- cpe:2.3:a:pivotal_software:credhub-release:1.1.0:*:*:*:*:*:*:*
- Range: Credhub Credhub-release version 1.1.0 only
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.cloudfoundry.org/cve-2017-8038/nvdIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.