CVE-2017-8037

Name of the Vulnerable Software and Affected Versions CAPI-release versions after v1.6.0 and prior to v1.38.0 cf-release versions after v244 and prior to v270

Description The issue allows a Space Developer to gain access to files on the Cloud Controller VM for that installation, resulting in an information leak or disclosure. This can be achieved by sending a carefully crafted CAPI request.

Recommendations For CAPI-release versions after v1.6.0 and prior to v1.38.0, upgrade to version v1.38.0 or later to fix the issue. For cf-release versions after v244 and prior to v270, upgrade to version v270 or later to fix the issue.