PT-2017-9537
CVE-2016-8218
·
تاريخ النشر
2017-06-13
·
تاريخ التحديث
2017-11-08
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Cloud Foundry Foundation routing-release versions prior to 0.142.0
Cloud Foundry Foundation cf-release versions 203 through 231
Description
An issue exists due to incomplete validation logic in JSON Web Token (JWT) libraries, allowing unprivileged attackers to impersonate other users to the routing API.
Recommendations
For routing-release versions prior to 0.142.0, update to version 0.142.0 or later.
For cf-release versions 203 through 231, update to a version after 231.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾