Critical
Security advisory
An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x versions prior to v3.6.11, 3.9.x versions prior to v3.9.13, and other versions prior to v4.2.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.15, 24.x versions prior to v24.10, 30.x versions prior to 30.3, and other versions prior to v37. There is privilege escalation (arbitrary password reset) with user invitations.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2017-4992
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 05:31 UTC · Revision 1
Source evidence
An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x versions prior to v3.6.11, 3.9.x versions prior to v3.9.13, and other versions prior to v4.2.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.15, 24.x versions prior to v24.10, 30.x versions prior to 30.3, and other versions prior to v37. There is privilege escalation (arbitrary password reset) with user invitations.
osv:CVE-2017-4992
Complete source record
{
"id": "12654023b83441a5b318eefacb76e2860cb78447ae9bf5999147d914299416cc",
"url": "https://osv.dev/vulnerability/CVE-2017-4992",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2017-4992",
"summary": "An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x versions prior to v3.6.11, 3.9.x versions prior to v3.9.13, and other versions prior to v4.2.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.15, 24.x versions prior to v24.10, 30.x versions prior to 30.3, and other versions prior to v37. There is privilege escalation (arbitrary password reset) with user invitations.",
"evidence": "osv:CVE-2017-4992",
"products": [],
"severity": "critical",
"structured": {
"id": "CVE-2017-4992",
"aliases": [
"CVE-2017-4992",
"GHSA-jcmh-x32v-7mgf"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/cloudfoundry-attic/cf-release",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"last_affected": "131c253c541e71d149ae3401052cc2431d257e77"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:cloudfoundry:cf-release:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"last_affected": "260"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"v260",
"v253",
"v249",
"v245",
"v205",
"v183",
"v170",
"v161",
"v157",
"v156",
"rc145.0",
"v143",
"works-for-us",
"v140",
"v137",
"v136",
"v135",
"v134",
"v133",
"v132",
"scotty_09012012",
"v119",
"v109",
"v105",
"v104",
"v103",
"v102",
"v100",
"v99",
"-",
"log",
"list"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-4992.json"
}
},
{
"ranges": [
{
"repo": "https://github.com/cloudfoundry/uaa",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"last_affected": "4bb775f81099c9eac8819688a7392bcd1a1fd758"
},
{
"introduced": "7640c1433ec193b6696ee5e37a524a353fb3053e"
},
{
"last_affected": "acbc2bbf50068532d5a39a3a95163cb01ea14b25"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"last_affected": "4.2.0"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.2.5.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.2.5.4"
},
{
"last_affected": "2.2.5.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.1"
},
{
"last_affected": "2.7.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.2"
},
{
"last_affected": "2.7.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.3"
},
{
"last_affected": "2.7.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4"
},
{
"last_affected": "2.7.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4.1"
},
{
"last_affected": "2.7.4.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4.2"
},
{
"last_affected": "2.7.4.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4.3"
},
{
"last_affected": "2.7.4.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4.4"
},
{
"last_affected": "2.7.4.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4.5"
},
{
"last_affected": "2.7.4.5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.6:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4.6"
},
{
"last_affected": "2.7.4.6"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.7:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4.7"
},
{
"last_affected": "2.7.4.7"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.8:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4.8"
},
{
"last_affected": "2.7.4.8"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.9:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4.9"
},
{
"last_affected": "2.7.4.9"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.11:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4.11"
},
{
"last_affected": "2.7.4.11"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.12:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4.12"
},
{
"last_affected": "2.7.4.12"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.13:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4.13"
},
{
"last_affected": "2.7.4.13"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.14:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4.14"
},
{
"last_affected": "2.7.4.14"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.15:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4.15"
},
{
"last_affected": "2.7.4.15"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.16:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4.16"
},
{
"last_affected": "2.7.4.16"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.6.1"
},
{
"last_affected": "3.6.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.6.2"
},
{
"last_affected": "3.6.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.6.3"
},
{
"last_affected": "3.6.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.6.4"
},
{
"last_affected": "3.6.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.6.5"
},
{
"last_affected": "3.6.5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.6:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.6.6"
},
{
"last_affected": "3.6.6"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.7:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.6.7"
},
{
"last_affected": "3.6.7"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.8:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.6.8"
},
{
"last_affected": "3.6.8"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.9:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.6.9"
},
{
"last_affected": "3.6.9"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.10:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.6.10"
},
{
"last_affected": "3.6.10"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.9.1"
},
{
"last_affected": "3.9.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.9.2"
},
{
"last_affected": "3.9.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.9.3"
},
{
"last_affected": "3.9.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.9.4"
},
{
"last_affected": "3.9.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.9.5"
},
{
"last_affected": "3.9.5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.6:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.9.6"
},
{
"last_affected": "3.9.6"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.7:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.9.7"
},
{
"last_affected": "3.9.7"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.8:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.9.8"
},
{
"last_affected": "3.9.8"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.9:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.9.9"
},
{
"last_affected": "3.9.9"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.10:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.9.10"
},
{
"last_affected": "3.9.10"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.11:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.9.11"
},
{
"last_affected": "3.9.11"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.12:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.9.12"
},
{
"last_affected": "3.9.12"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.13:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.9.13"
},
{
"last_affected": "3.9.13"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"2.2.5.4",
"2.7.1",
"2.7.2",
"2.7.3",
"2.7.4",
"2.7.4.1",
"2.7.4.11",
"2.7.4.12",
"2.7.4.13",
"2.7.4.14",
"2.7.4.15",
"2.7.4.16",
"2.7.4.2",
"2.7.4.3",
"2.7.4.4",
"2.7.4.5",
"2.7.4.6",
"2.7.4.7",
"2.7.4.8",
"2.7.4.9",
"3.6.1",
"3.6.10",
"3.6.2",
"3.6.3",
"3.6.4",
"3.6.5",
"3.6.6",
"3.6.7",
"3.6.8",
"3.6.9",
"3.9.1",
"3.9.10",
"3.9.11",
"3.9.12",
"3.9.13",
"3.9.2",
"3.9.3",
"3.9.4",
"3.9.5",
"3.9.6",
"3.9.7",
"3.9.8",
"3.9.9",
"4.2.0",
"4.1.0",
"3.16.0",
"4.0.0",
"3.15.0",
"3.14.0",
"3.13.0",
"3.12.0",
"3.11.0",
"3.10.0",
"3.9.0",
"3.8.0",
"travis-success-1497",
"travis-success-1478",
"travis-success-1475",
"1.8.0",
"1.6.2",
"1.6.1",
"1.5.4.1",
"1.5.4",
"1.5.3",
"1.5.2.1",
"1.5.2",
"1.5.0",
"1.4.7",
"1.4.6",
"1.4.5",
"1.4.3",
"1.4.2",
"1.4.1",
"1.4.0",
"1.2.6",
"1.2.0",
"1.1.2",
"1.1.1",
"1.1",
"1.0.3",
"1.0.1"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-4992.json"
}
},
{
"ranges": [
{
"repo": "https://github.com/cloudfoundry/uaa-release",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"last_affected": "5827452fcb119915c1410211c7d4606a9c39fede"
},
{
"introduced": "9e9bc18c684b92f99e5ff97b857729ebb657f993"
},
{
"last_affected": "cc0bff967af88f05814e5d3afe2d434a4219c4d0"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"last_affected": "27"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13.1"
},
{
"last_affected": "13.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13.2"
},
{
"last_affected": "13.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13.3"
},
{
"last_affected": "13.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13.4"
},
{
"last_affected": "13.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13.5"
},
{
"last_affected": "13.5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.6:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13.6"
},
{
"last_affected": "13.6"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.7:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13.7"
},
{
"last_affected": "13.7"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.8:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13.8"
},
{
"last_affected": "13.8"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.9:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13.9"
},
{
"last_affected": "13.9"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.10:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13.10"
},
{
"last_affected": "13.10"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.11:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13.11"
},
{
"last_affected": "13.11"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.12:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13.12"
},
{
"last_affected": "13.12"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.13:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13.13"
},
{
"last_affected": "13.13"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.14:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13.14"
},
{
"last_affected": "13.14"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24:*:*:*:*:*:*:*",
"range": [
{
"introduced": "24"
},
{
"last_affected": "24"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "24.1"
},
{
"last_affected": "24.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "24.2"
},
{
"last_affected": "24.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "24.3"
},
{
"last_affected": "24.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "24.4"
},
{
"last_affected": "24.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "24.5"
},
{
"last_affected": "24.5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.6:*:*:*:*:*:*:*",
"range": [
{
"introduced": "24.6"
},
{
"last_affected": "24.6"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.7:*:*:*:*:*:*:*",
"range": [
{
"introduced": "24.7"
},
{
"last_affected": "24.7"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.8:*:*:*:*:*:*:*",
"range": [
{
"introduced": "24.8"
},
{
"last_affected": "24.8"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.9:*:*:*:*:*:*:*",
"range": [
{
"introduced": "24.9"
},
{
"last_affected": "24.9"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30:*:*:*:*:*:*:*",
"range": [
{
"introduced": "30"
},
{
"last_affected": "30"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "30.1"
},
{
"last_affected": "30.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "30.2"
},
{
"last_affected": "30.2"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"13.1",
"13.10",
"13.11",
"13.12",
"13.13",
"13.14",
"13.2",
"13.3",
"13.4",
"13.5",
"13.6",
"13.7",
"24",
"24.1",
"24.2",
"24.3",
"24.4",
"24.5",
"24.6",
"24.7",
"24.8",
"24.9",
"30",
"30.1",
"30.2",
"v27",
"v26",
"v24",
"v25",
"v23",
"v22",
"v21",
"v20",
"v19",
"v18",
"v17",
"v16",
"v15",
"v14",
"v12.3",
"ci-upgrade",
"v12",
"v11",
"v10",
"v9",
"v8",
"v7",
"v6",
"v3",
"v2"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-4992.json"
}
}
],
"modified": "2026-10-24T10:30:29.895741893Z",
"provider": "osv",
"references": [
"https://www.cloudfoundry.org/cve-2017-4992/"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:*:*:*:*:*:*:*:*"
],
"vendor_product": "pivotal_software:cloud_foundry_uaa",
"extracted_events": [
{
"range": [
{
"last_affected": "4.2.0"
},
{
"last_affected": "4.2.0"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.2.5.4:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.1:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.2:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.3:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.11:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.12:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.13:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.14:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.15:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.16:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.1:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.2:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.3:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.4:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.5:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.6:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.7:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.8:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.9:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.10:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.1:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.2:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.3:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.4:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.5:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.6:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.7:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.8:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.9:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.10:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.11:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.12:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.13:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.1:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.2:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.3:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.4:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.5:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.6:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.7:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.8:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.9:*:*:*:*:*:*:*"
],
"vendor_product": "pivotal_software:cloud_foundry_uaa",
"extracted_events": [
{
"range": [
{
"introduced": "2.2.5.4"
},
{
"last_affected": "2.2.5.4"
},
{
"introduced": "2.2.5.4"
},
{
"last_affected": "2.2.5.4"
},
{
"introduced": "2.7.1"
},
{
"last_affected": "2.7.1"
},
{
"introduced": "2.7.1"
},
{
"last_affected": "2.7.1"
},
{
"introduced": "2.7.2"
},
{
"last_affected": "2.7.2"
},
{
"introduced": "2.7.2"
},
{
"last_affected": "2.7.2"
},
{
"introduced": "2.7.3"
},
{
"last_affected": "2.7.3"
},
{
"introduced": "2.7.3"
},
{
"last_affected": "2.7.3"
},
{
"introduced": "2.7.4"
},
{
"last_affected": "2.7.4"
},
{
"introduced": "2.7.4"
},
{
"last_affected": "2.7.4"
},
{
"introduced": "2.7.4.1"
},
{
"last_affected": "2.7.4.1"
},
{
"introduced": "2.7.4.1"
},
{
"last_affected": "2.7.4.1"
},
{
"introduced": "2.7.4.2"
},
{
"last_affected": "2.7.4.2"
},
{
"introduced": "2.7.4.2"
},
{
"last_affected": "2.7.4.2"
},
{
"introduced": "2.7.4.3"
},
{
"last_affected": "2.7.4.3"
},
{
"introduced": "2.7.4.3"
},
{
"last_affected": "2.7.4.3"
},
{
"introduced": "2.7.4.4"
},
{
"last_affected": "2.7.4.4"
},
{
"introduced": "2.7.4.4"
},
{
"last_affected": "2.7.4.4"
},
{
"introduced": "2.7.4.5"
},
{
"last_affected": "2.7.4.5"
},
{
"introduced": "2.7.4.5"
},
{
"last_affected": "2.7.4.5"
},
{
"introduced": "2.7.4.6"
},
{
"last_affected": "2.7.4.6"
},
{
"introduced": "2.7.4.6"
},
{
"last_affected": "2.7.4.6"
},
{
"introduced": "2.7.4.7"
},
{
"last_affected": "2.7.4.7"
},
{
"introduced": "2.7.4.7"
},
{
"last_affected": "2.7.4.7"
},
{
"introduced": "2.7.4.8"
},
{
"last_affected": "2.7.4.8"
},
{
"introduced": "2.7.4.8"
},
{
"last_affected": "2.7.4.8"
},
{
"introduced": "2.7.4.9"
},
{
"last_affected": "2.7.4.9"
},
{
"introduced": "2.7.4.9"
},
{
"last_affected": "2.7.4.9"
},
{
"introduced": "2.7.4.11"
},
{
"last_affected": "2.7.4.11"
},
{
"introduced": "2.7.4.11"
},
{
"last_affected": "2.7.4.11"
},
{
"introduced": "2.7.4.12"
},
{
"last_affected": "2.7.4.12"
},
{
"introduced": "2.7.4.12"
},
{
"last_affected": "2.7.4.12"
},
{
"introduced": "2.7.4.13"
},
{
"last_affected": "2.7.4.13"
},
{
"introduced": "2.7.4.13"
},
{
"last_affected": "2.7.4.13"
},
{
"introduced": "2.7.4.14"
},
{
"last_affected": "2.7.4.14"
},
{
"introduced": "2.7.4.14"
},
{
"last_affected": "2.7.4.14"
},
{
"introduced": "2.7.4.15"
},
{
"last_affected": "2.7.4.15"
},
{
"introduced": "2.7.4.15"
},
{
"last_affected": "2.7.4.15"
},
{
"introduced": "2.7.4.16"
},
{
"last_affected": "2.7.4.16"
},
{
"introduced": "2.7.4.16"
},
{
"last_affected": "2.7.4.16"
},
{
"introduced": "3.6.1"
},
{
"last_affected": "3.6.1"
},
{
"introduced": "3.6.1"
},
{
"last_affected": "3.6.1"
},
{
"introduced": "3.6.2"
},
{
"last_affected": "3.6.2"
},
{
"introduced": "3.6.2"
},
{
"last_affected": "3.6.2"
},
{
"introduced": "3.6.3"
},
{
"last_affected": "3.6.3"
},
{
"introduced": "3.6.3"
},
{
"last_affected": "3.6.3"
},
{
"introduced": "3.6.4"
},
{
"last_affected": "3.6.4"
},
{
"introduced": "3.6.4"
},
{
"last_affected": "3.6.4"
},
{
"introduced": "3.6.5"
},
{
"last_affected": "3.6.5"
},
{
"introduced": "3.6.5"
},
{
"last_affected": "3.6.5"
},
{
"introduced": "3.6.6"
},
{
"last_affected": "3.6.6"
},
{
"introduced": "3.6.6"
},
{
"last_affected": "3.6.6"
},
{
"introduced": "3.6.7"
},
{
"last_affected": "3.6.7"
},
{
"introduced": "3.6.7"
},
{
"last_affected": "3.6.7"
},
{
"introduced": "3.6.8"
},
{
"last_affected": "3.6.8"
},
{
"introduced": "3.6.8"
},
{
"last_affected": "3.6.8"
},
{
"introduced": "3.6.9"
},
{
"last_affected": "3.6.9"
},
{
"introduced": "3.6.9"
},
{
"last_affected": "3.6.9"
},
{
"introduced": "3.6.10"
},
{
"last_affected": "3.6.10"
},
{
"introduced": "3.6.10"
},
{
"last_affected": "3.6.10"
},
{
"introduced": "3.9.1"
},
{
"last_affected": "3.9.1"
},
{
"introduced": "3.9.1"
},
{
"last_affected": "3.9.1"
},
{
"introduced": "3.9.2"
},
{
"last_affected": "3.9.2"
},
{
"introduced": "3.9.2"
},
{
"last_affected": "3.9.2"
},
{
"introduced": "3.9.3"
},
{
"last_affected": "3.9.3"
},
{
"introduced": "3.9.3"
},
{
"last_affected": "3.9.3"
},
{
"introduced": "3.9.4"
},
{
"last_affected": "3.9.4"
},
{
"introduced": "3.9.4"
},
{
"last_affected": "3.9.4"
},
{
"introduced": "3.9.5"
},
{
"last_affected": "3.9.5"
},
{
"introduced": "3.9.5"
},
{
"last_affected": "3.9.5"
},
{
"introduced": "3.9.6"
},
{
"last_affected": "3.9.6"
},
{
"introduced": "3.9.6"
},
{
"last_affected": "3.9.6"
},
{
"introduced": "3.9.7"
},
{
"last_affected": "3.9.7"
},
{
"introduced": "3.9.7"
},
{
"last_affected": "3.9.7"
},
{
"introduced": "3.9.8"
},
{
"last_affected": "3.9.8"
},
{
"introduced": "3.9.8"
},
{
"last_affected": "3.9.8"
},
{
"introduced": "3.9.9"
},
{
"last_affected": "3.9.9"
},
{
"introduced": "3.9.9"
},
{
"last_affected": "3.9.9"
},
{
"introduced": "3.9.10"
},
{
"last_affected": "3.9.10"
},
{
"introduced": "3.9.10"
},
{
"last_affected": "3.9.10"
},
{
"introduced": "3.9.11"
},
{
"last_affected": "3.9.11"
},
{
"introduced": "3.9.11"
},
{
"last_affected": "3.9.11"
},
{
"introduced": "3.9.12"
},
{
"last_affected": "3.9.12"
},
{
"introduced": "3.9.12"
},
{
"last_affected": "3.9.12"
},
{
"introduced": "3.9.13"
},
{
"last_affected": "3.9.13"
},
{
"introduced": "3.9.13"
},
{
"last_affected": "3.9.13"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2017-4992",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 432445,
"published_at": "2017-06-13T06:29:00.77+00:00"
}