CVE-2017-4974
Blind SQL Injection with privileged Cloud Foundry UAA endpoints
Also known as GHSA-cw9c-v3v2-99hm
Published 9 y ago · modified 4 mo ago · JSON
Summary
An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v258; UAA release 2.x versions prior to v2.7.4.15, 3.6.x versions prior to v3.6.9, 3.9.x versions prior to v3.9.11, and other versions prior to v3.16.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.13, 24.x versions prior to v24.8, and other versions prior to v30.1. An authorized user can use a blind SQL injection attack to query the contents of the UAA database, aka "Blind SQL Injection with privileged UAA endpoints."
Exploit prediction (EPSS)
0.97% probability of exploitation in the next 30 days, higher than 62% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| NVD | 2.0 | 4.0 | AV:N/AC:L/Au:S/C:P/I:N/A:N |
| GitHub | 3.0 | 6.5 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.cloudfoundry.identity:cloudfoundry-identity-server | >=2.0.0, <2.7.4.15 >=3.0.0, <3.6.9 >=3.7.0, <3.9.11 >=3.10.0, <3.16.0 | 2.7.4.15 3.6.9 3.9.11 3.16.0 |
Affected products
- n/a Cloud Foundry UAA
Classification
- Weakness
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command
References
- cloudfoundry.org /cve-2017-4974/ · x_refsource_CONFIRM, x_transferred
- securityfocus.com /bid/99254 · vdb-entry, x_refsource_BID, x_transferred
- nvd.nist.gov /vuln/detail/CVE-2017-4974 · advisory
- github.com /cloudfoundry/uaa/commit/01edea6337c8ddb2ab80906aa1254d3c1dc02fb · web
- github.com /cloudfoundry/uaa/commit/2dbeb9e93e076d71d7f0886dea9f77f23e0b8f3c · web
- github.com /cloudfoundry/uaa/commit/5dc5ca9176ed5baa870680d99f37e7e559dddc5 · web
- github.com /cloudfoundry/uaa/commit/74b9b270787aa602196d59d58893c3a6e09816f9 · web
- github.com /cloudfoundry/uaa/commit/b6d6526cb89120043d390bf0274cd062e9fc452 · web
- github.com /cloudfoundry/uaa · package
- web.archive.org /web/20200227163823/http://www.securityfocus.com/bid/99254 · web
- cloudfoundry.org /cve-2017-4974 · web
Sources
- CVE List: CVE-2017-4974
- GitHub Advisory: GHSA-cw9c-v3v2-99hm
- NVD: CVE-2017-4974
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.