Read the docs
TI-2017-05625 Aliases CVE-2017-8032GHSA-9frw-wmvq-5rrc

Improper privilege management in Cloud Foundry

Priority LOW 31CWE-269Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
High
Impact type
Privilege escalation
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA and GitHub. Impact type from CWE-269.

Summary

In Cloud Foundry cf-release versions prior to v264; UAA release all versions of UAA v2.x.x, 3.6.x versions prior to v3.6.13, 3.9.x versions prior to v3.9.15, 3.20.x versions prior to v3.20.0, and other versions prior to v4.4.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.17, 24.x versions prior to v24.12. 30.x versions prior to 30.5, and other versions prior to v41, zone administrators are allowed to escalate their privileges when mapping permissions for an external provider.

Why it matters now

EPSS 0.00879 59th percentileScored 2026-11-07
Fix Fixed org.cloudfoundry.identity:cloudfoundry-identity-server (Maven): 3.6.13, 3.9.15, 3.20.0 +1

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Cloud FoundryCloud Foundry—No fix listedCNA
—org.cloudfoundry.identity:cloudfoundry-identity-server (Maven)before 3.6.133.6.13Patch availableGHSA-9frw-wmvq-5rrc
—org.cloudfoundry.identity:cloudfoundry-identity-server (Maven)3.7.0 to before 3.9.153.9.15Patch availableGHSA-9frw-wmvq-5rrc
—org.cloudfoundry.identity:cloudfoundry-identity-server (Maven)3.10.0 to before 3.20.03.20.0Patch availableGHSA-9frw-wmvq-5rrc
—org.cloudfoundry.identity:cloudfoundry-identity-server (Maven)4.0.0 to before 4.4.04.4.0Patch availableGHSA-9frw-wmvq-5rrc
  • Cloud Foundry Vendor— Affected Cloud Foundry Fixed in — No fix listed CNA
  • org.cloudfoundry.identity:cloudfoundry-identity-server (Maven) Vendor— Affected before 3.6.13 Fixed in 3.6.13 Patch available GHSA-9frw-wmvq-5rrc
  • org.cloudfoundry.identity:cloudfoundry-identity-server (Maven) Vendor— Affected 3.7.0 to before 3.9.15 Fixed in 3.9.15 Patch available GHSA-9frw-wmvq-5rrc
  • org.cloudfoundry.identity:cloudfoundry-identity-server (Maven) Vendor— Affected 3.10.0 to before 3.20.0 Fixed in 3.20.0 Patch available GHSA-9frw-wmvq-5rrc
  • org.cloudfoundry.identity:cloudfoundry-identity-server (Maven) Vendor— Affected 4.0.0 to before 4.4.0 Fixed in 4.4.0 Patch available GHSA-9frw-wmvq-5rrc

CPE configurations NVD · 81

CPEVersionsRoleVendor
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.2.5.4:*:*:*:*:*:*:*2.2.5.4VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.1:*:*:*:*:*:*:*2.7.1VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.2:*:*:*:*:*:*:*2.7.2VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.3:*:*:*:*:*:*:*2.7.3VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4:*:*:*:*:*:*:*2.7.4VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.1:*:*:*:*:*:*:*2.7.4.1VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.2:*:*:*:*:*:*:*2.7.4.2VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.3:*:*:*:*:*:*:*2.7.4.3VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.4:*:*:*:*:*:*:*2.7.4.4VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.5:*:*:*:*:*:*:*2.7.4.5VulnerableSpring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.2.5.4:*:*:*:*:*:*:* Versions 2.2.5.4 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.1:*:*:*:*:*:*:* Versions 2.7.1 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.2:*:*:*:*:*:*:* Versions 2.7.2 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.3:*:*:*:*:*:*:* Versions 2.7.3 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4:*:*:*:*:*:*:* Versions 2.7.4 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.1:*:*:*:*:*:*:* Versions 2.7.4.1 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.2:*:*:*:*:*:*:* Versions 2.7.4.2 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.3:*:*:*:*:*:*:* Versions 2.7.4.3 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.4:*:*:*:*:*:*:* Versions 2.7.4.4 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.5:*:*:*:*:*:*:* Versions 2.7.4.5 Vulnerable ·Spring by Pivotal
Show 71 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.6:*:*:*:*:*:*:*2.7.4.6VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.7:*:*:*:*:*:*:*2.7.4.7VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.8:*:*:*:*:*:*:*2.7.4.8VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.9:*:*:*:*:*:*:*2.7.4.9VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.11:*:*:*:*:*:*:*2.7.4.11VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.12:*:*:*:*:*:*:*2.7.4.12VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.13:*:*:*:*:*:*:*2.7.4.13VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.14:*:*:*:*:*:*:*2.7.4.14VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.15:*:*:*:*:*:*:*2.7.4.15VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.16:*:*:*:*:*:*:*2.7.4.16VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.1:*:*:*:*:*:*:*3.6.1VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.2:*:*:*:*:*:*:*3.6.2VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.3:*:*:*:*:*:*:*3.6.3VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.4:*:*:*:*:*:*:*3.6.4VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.5:*:*:*:*:*:*:*3.6.5VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.6:*:*:*:*:*:*:*3.6.6VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.7:*:*:*:*:*:*:*3.6.7VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.8:*:*:*:*:*:*:*3.6.8VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.9:*:*:*:*:*:*:*3.6.9VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.10:*:*:*:*:*:*:*3.6.10VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.11:*:*:*:*:*:*:*3.6.11VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.12:*:*:*:*:*:*:*3.6.12VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.1:*:*:*:*:*:*:*3.9.1VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.2:*:*:*:*:*:*:*3.9.2VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.3:*:*:*:*:*:*:*3.9.3VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.4:*:*:*:*:*:*:*3.9.4VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.5:*:*:*:*:*:*:*3.9.5VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.6:*:*:*:*:*:*:*3.9.6VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.7:*:*:*:*:*:*:*3.9.7VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.8:*:*:*:*:*:*:*3.9.8VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.9:*:*:*:*:*:*:*3.9.9VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.10:*:*:*:*:*:*:*3.9.10VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.11:*:*:*:*:*:*:*3.9.11VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.12:*:*:*:*:*:*:*3.9.12VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.13:*:*:*:*:*:*:*3.9.13VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.14:*:*:*:*:*:*:*3.9.14VulnerableSpring by Pivotal
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:*:*:*:*:*:*:*:*up to 40VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.1:*:*:*:*:*:*:*13.1VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.2:*:*:*:*:*:*:*13.2VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.3:*:*:*:*:*:*:*13.3VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.4:*:*:*:*:*:*:*13.4VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.5:*:*:*:*:*:*:*13.5VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.6:*:*:*:*:*:*:*13.6VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.7:*:*:*:*:*:*:*13.7VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.8:*:*:*:*:*:*:*13.8VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.9:*:*:*:*:*:*:*13.9VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.10:*:*:*:*:*:*:*13.10VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.11:*:*:*:*:*:*:*13.11VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.12:*:*:*:*:*:*:*13.12VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.13:*:*:*:*:*:*:*13.13VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.14:*:*:*:*:*:*:*13.14VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.15:*:*:*:*:*:*:*13.15VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.16:*:*:*:*:*:*:*13.16VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24:*:*:*:*:*:*:*24VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.1:*:*:*:*:*:*:*24.1VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.2:*:*:*:*:*:*:*24.2VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.3:*:*:*:*:*:*:*24.3VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.4:*:*:*:*:*:*:*24.4VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.5:*:*:*:*:*:*:*24.5VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.6:*:*:*:*:*:*:*24.6VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.7:*:*:*:*:*:*:*24.7VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.8:*:*:*:*:*:*:*24.8VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.9:*:*:*:*:*:*:*24.9VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.10:*:*:*:*:*:*:*24.10VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.11:*:*:*:*:*:*:*24.11VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30:*:*:*:*:*:*:*30VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.1:*:*:*:*:*:*:*30.1VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.2:*:*:*:*:*:*:*30.2VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.3:*:*:*:*:*:*:*30.3VulnerableCloudFoundry Foundation
cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.4:*:*:*:*:*:*:*30.4VulnerableCloudFoundry Foundation
cpe:2.3:a:pivotal_software:cloud_foundry_cf:*:*:*:*:*:*:*:*up to 263VulnerableSpring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.6:*:*:*:*:*:*:* Versions 2.7.4.6 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.7:*:*:*:*:*:*:* Versions 2.7.4.7 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.8:*:*:*:*:*:*:* Versions 2.7.4.8 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.9:*:*:*:*:*:*:* Versions 2.7.4.9 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.11:*:*:*:*:*:*:* Versions 2.7.4.11 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.12:*:*:*:*:*:*:* Versions 2.7.4.12 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.13:*:*:*:*:*:*:* Versions 2.7.4.13 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.14:*:*:*:*:*:*:* Versions 2.7.4.14 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.15:*:*:*:*:*:*:* Versions 2.7.4.15 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.16:*:*:*:*:*:*:* Versions 2.7.4.16 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.1:*:*:*:*:*:*:* Versions 3.6.1 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.2:*:*:*:*:*:*:* Versions 3.6.2 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.3:*:*:*:*:*:*:* Versions 3.6.3 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.4:*:*:*:*:*:*:* Versions 3.6.4 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.5:*:*:*:*:*:*:* Versions 3.6.5 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.6:*:*:*:*:*:*:* Versions 3.6.6 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.7:*:*:*:*:*:*:* Versions 3.6.7 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.8:*:*:*:*:*:*:* Versions 3.6.8 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.9:*:*:*:*:*:*:* Versions 3.6.9 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.10:*:*:*:*:*:*:* Versions 3.6.10 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.11:*:*:*:*:*:*:* Versions 3.6.11 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.12:*:*:*:*:*:*:* Versions 3.6.12 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.1:*:*:*:*:*:*:* Versions 3.9.1 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.2:*:*:*:*:*:*:* Versions 3.9.2 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.3:*:*:*:*:*:*:* Versions 3.9.3 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.4:*:*:*:*:*:*:* Versions 3.9.4 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.5:*:*:*:*:*:*:* Versions 3.9.5 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.6:*:*:*:*:*:*:* Versions 3.9.6 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.7:*:*:*:*:*:*:* Versions 3.9.7 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.8:*:*:*:*:*:*:* Versions 3.9.8 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.9:*:*:*:*:*:*:* Versions 3.9.9 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.10:*:*:*:*:*:*:* Versions 3.9.10 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.11:*:*:*:*:*:*:* Versions 3.9.11 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.12:*:*:*:*:*:*:* Versions 3.9.12 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.13:*:*:*:*:*:*:* Versions 3.9.13 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.14:*:*:*:*:*:*:* Versions 3.9.14 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:*:*:*:*:*:*:*:* Versions up to 40 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.1:*:*:*:*:*:*:* Versions 13.1 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.2:*:*:*:*:*:*:* Versions 13.2 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.3:*:*:*:*:*:*:* Versions 13.3 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.4:*:*:*:*:*:*:* Versions 13.4 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.5:*:*:*:*:*:*:* Versions 13.5 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.6:*:*:*:*:*:*:* Versions 13.6 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.7:*:*:*:*:*:*:* Versions 13.7 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.8:*:*:*:*:*:*:* Versions 13.8 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.9:*:*:*:*:*:*:* Versions 13.9 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.10:*:*:*:*:*:*:* Versions 13.10 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.11:*:*:*:*:*:*:* Versions 13.11 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.12:*:*:*:*:*:*:* Versions 13.12 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.13:*:*:*:*:*:*:* Versions 13.13 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.14:*:*:*:*:*:*:* Versions 13.14 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.15:*:*:*:*:*:*:* Versions 13.15 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.16:*:*:*:*:*:*:* Versions 13.16 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24:*:*:*:*:*:*:* Versions 24 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.1:*:*:*:*:*:*:* Versions 24.1 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.2:*:*:*:*:*:*:* Versions 24.2 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.3:*:*:*:*:*:*:* Versions 24.3 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.4:*:*:*:*:*:*:* Versions 24.4 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.5:*:*:*:*:*:*:* Versions 24.5 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.6:*:*:*:*:*:*:* Versions 24.6 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.7:*:*:*:*:*:*:* Versions 24.7 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.8:*:*:*:*:*:*:* Versions 24.8 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.9:*:*:*:*:*:*:* Versions 24.9 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.10:*:*:*:*:*:*:* Versions 24.10 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.11:*:*:*:*:*:*:* Versions 24.11 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30:*:*:*:*:*:*:* Versions 30 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.1:*:*:*:*:*:*:* Versions 30.1 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.2:*:*:*:*:*:*:* Versions 30.2 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.3:*:*:*:*:*:*:* Versions 30.3 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.4:*:*:*:*:*:*:* Versions 30.4 Vulnerable ·CloudFoundry Foundation
  • cpe:2.3:a:pivotal_software:cloud_foundry_cf:*:*:*:*:*:*:*:* Versions up to 263 Vulnerable ·Spring by Pivotal

Remediation

  • Fix · GHSA-9frw-wmvq-5rrc org.cloudfoundry.identity:cloudfoundry-identity-server (Maven) Fixed in 3.6.13 Advisory →
  • Fix · GHSA-9frw-wmvq-5rrc org.cloudfoundry.identity:cloudfoundry-identity-server (Maven) Fixed in 3.9.15 Advisory →
  • Fix · GHSA-9frw-wmvq-5rrc org.cloudfoundry.identity:cloudfoundry-identity-server (Maven) Fixed in 3.20.0 Advisory →
  • Fix · GHSA-9frw-wmvq-5rrc org.cloudfoundry.identity:cloudfoundry-identity-server (Maven) Fixed in 4.4.0 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-8032
  2. 2026-10-03 Alias added: GHSA-9frw-wmvq-5rrc

References

Advisory 2

Other 6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences