High
Security advisory
An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions prior to v3.6.8, 3.9.x versions prior to v3.9.10, and other versions prior to v3.15.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.12, 24.x versions prior to v24.7, and other versions prior to v30. A vulnerability has been identified with the groups endpoint in UAA allowing users to elevate their privileges.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2017-4973
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 06:19 UTC · Revision 1
Source evidence
An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions prior to v3.6.8, 3.9.x versions prior to v3.9.10, and other versions prior to v3.15.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.12, 24.x versions prior to v24.7, and other versions prior to v30. A vulnerability has been identified with the groups endpoint in UAA allowing users to elevate their privileges.
osv:CVE-2017-4973
Complete source record
{
"id": "c02607bf5a7938c712a212c0b61946c9586b6b9e2369d247e10b6b1455a97b1f",
"url": "https://osv.dev/vulnerability/CVE-2017-4973",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2017-4973",
"summary": "An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions prior to v3.6.8, 3.9.x versions prior to v3.9.10, and other versions prior to v3.15.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.12, 24.x versions prior to v24.7, and other versions prior to v30. A vulnerability has been identified with the groups endpoint in UAA allowing users to elevate their privileges.",
"evidence": "osv:CVE-2017-4973",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2017-4973",
"aliases": [
"CVE-2017-4973",
"GHSA-pgjc-gc7g-p2c6"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/cloudfoundry/uaa",
"type": "GIT",
"events": [
{
"introduced": "7640c1433ec193b6696ee5e37a524a353fb3053e"
},
{
"last_affected": "acbc2bbf50068532d5a39a3a95163cb01ea14b25"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.2.5.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.2.5.4"
},
{
"last_affected": "2.2.5.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.1"
},
{
"last_affected": "2.7.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.2"
},
{
"last_affected": "2.7.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.3"
},
{
"last_affected": "2.7.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4"
},
{
"last_affected": "2.7.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4.1"
},
{
"last_affected": "2.7.4.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4.2"
},
{
"last_affected": "2.7.4.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4.3"
},
{
"last_affected": "2.7.4.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4.4"
},
{
"last_affected": "2.7.4.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4.5"
},
{
"last_affected": "2.7.4.5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.6:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4.6"
},
{
"last_affected": "2.7.4.6"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.7:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4.7"
},
{
"last_affected": "2.7.4.7"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.8:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4.8"
},
{
"last_affected": "2.7.4.8"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.9:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4.9"
},
{
"last_affected": "2.7.4.9"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.11:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4.11"
},
{
"last_affected": "2.7.4.11"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.12:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4.12"
},
{
"last_affected": "2.7.4.12"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.13:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.7.4.13"
},
{
"last_affected": "2.7.4.13"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.6.1"
},
{
"last_affected": "3.6.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.6.2"
},
{
"last_affected": "3.6.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.6.3"
},
{
"last_affected": "3.6.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.6.4"
},
{
"last_affected": "3.6.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.6.5"
},
{
"last_affected": "3.6.5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.6:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.6.6"
},
{
"last_affected": "3.6.6"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.7:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.6.7"
},
{
"last_affected": "3.6.7"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.9.1"
},
{
"last_affected": "3.9.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.9.2"
},
{
"last_affected": "3.9.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.9.3"
},
{
"last_affected": "3.9.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.9.4"
},
{
"last_affected": "3.9.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.9.5"
},
{
"last_affected": "3.9.5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.6:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.9.6"
},
{
"last_affected": "3.9.6"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.7:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.9.7"
},
{
"last_affected": "3.9.7"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.8:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.9.8"
},
{
"last_affected": "3.9.8"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.9:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.9.9"
},
{
"last_affected": "3.9.9"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.12:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.9.12"
},
{
"last_affected": "3.9.12"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.13:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.9.13"
},
{
"last_affected": "3.9.13"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"2.2.5.4",
"2.7.1",
"2.7.2",
"2.7.3",
"2.7.4",
"2.7.4.1",
"2.7.4.11",
"2.7.4.12",
"2.7.4.13",
"2.7.4.2",
"2.7.4.3",
"2.7.4.4",
"2.7.4.5",
"2.7.4.6",
"2.7.4.7",
"2.7.4.8",
"2.7.4.9",
"3.6.1",
"3.6.2",
"3.6.3",
"3.6.4",
"3.6.5",
"3.6.6",
"3.6.7",
"3.9.1",
"3.9.12",
"3.9.13",
"3.9.2",
"3.9.3",
"3.9.4",
"3.9.5",
"3.9.6",
"3.9.7",
"3.9.8",
"3.9.9"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-4973.json"
}
},
{
"ranges": [
{
"repo": "https://github.com/cloudfoundry/uaa-release",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"last_affected": "8c5ccff535f9fb3b924a3d1c52f795b0f8242054"
},
{
"introduced": "9e9bc18c684b92f99e5ff97b857729ebb657f993"
},
{
"last_affected": "87308108195b925a3076185fdcb83bc4cea02471"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"last_affected": "30"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13.1"
},
{
"last_affected": "13.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13.2"
},
{
"last_affected": "13.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13.3"
},
{
"last_affected": "13.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13.4"
},
{
"last_affected": "13.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13.5"
},
{
"last_affected": "13.5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.6:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13.6"
},
{
"last_affected": "13.6"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.7:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13.7"
},
{
"last_affected": "13.7"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.8:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13.8"
},
{
"last_affected": "13.8"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.9:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13.9"
},
{
"last_affected": "13.9"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.10:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13.10"
},
{
"last_affected": "13.10"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:13.11:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13.11"
},
{
"last_affected": "13.11"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24:*:*:*:*:*:*:*",
"range": [
{
"introduced": "24"
},
{
"last_affected": "24"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "24.1"
},
{
"last_affected": "24.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "24.2"
},
{
"last_affected": "24.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "24.3"
},
{
"last_affected": "24.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "24.4"
},
{
"last_affected": "24.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "24.5"
},
{
"last_affected": "24.5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:24.6:*:*:*:*:*:*:*",
"range": [
{
"introduced": "24.6"
},
{
"last_affected": "24.6"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "30.1"
},
{
"last_affected": "30.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "30.2"
},
{
"last_affected": "30.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:30.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "30.3"
},
{
"last_affected": "30.3"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"13.1",
"13.10",
"13.11",
"13.2",
"13.3",
"13.4",
"13.5",
"13.6",
"13.7",
"24",
"24.1",
"24.2",
"24.3",
"24.4",
"24.5",
"24.6",
"30.1",
"30.2",
"30.3",
"v30",
"v27",
"v26",
"v24",
"v25",
"v23",
"v22",
"v21",
"v20",
"v19",
"v18",
"v17",
"v16",
"v15",
"v14",
"v12.3",
"ci-upgrade",
"v12",
"v11",
"v10",
"v9",
"v8",
"v7",
"v6",
"v3",
"v2"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-4973.json"
}
}
],
"modified": "2026-10-24T10:30:37.711373211Z",
"provider": "osv",
"references": [
"https://www.cloudfoundry.org/cve-2017-4973/"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:pivotal_software:cloud_foundry_cf:*:*:*:*:*:*:*:*"
],
"vendor_product": "pivotal_software:cloud_foundry_cf",
"extracted_events": [
{
"range": [
{
"last_affected": "256"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.2.5.4:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.1:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.2:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.3:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.11:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.12:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.13:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.1:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.2:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.3:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.4:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.5:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.6:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.7:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.8:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.9:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.1:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.2:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.3:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.4:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.5:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.6:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.6.7:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.12:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.13:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.1:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.2:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.3:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.4:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.5:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.6:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.7:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.8:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.9.9:*:*:*:*:*:*:*"
],
"vendor_product": "pivotal_software:cloud_foundry_uaa",
"extracted_events": [
{
"range": [
{
"introduced": "2.2.5.4"
},
{
"last_affected": "2.2.5.4"
},
{
"introduced": "2.2.5.4"
},
{
"last_affected": "2.2.5.4"
},
{
"introduced": "2.7.1"
},
{
"last_affected": "2.7.1"
},
{
"introduced": "2.7.1"
},
{
"last_affected": "2.7.1"
},
{
"introduced": "2.7.2"
},
{
"last_affected": "2.7.2"
},
{
"introduced": "2.7.2"
},
{
"last_affected": "2.7.2"
},
{
"introduced": "2.7.3"
},
{
"last_affected": "2.7.3"
},
{
"introduced": "2.7.3"
},
{
"last_affected": "2.7.3"
},
{
"introduced": "2.7.4"
},
{
"last_affected": "2.7.4"
},
{
"introduced": "2.7.4"
},
{
"last_affected": "2.7.4"
},
{
"introduced": "2.7.4.1"
},
{
"last_affected": "2.7.4.1"
},
{
"introduced": "2.7.4.1"
},
{
"last_affected": "2.7.4.1"
},
{
"introduced": "2.7.4.2"
},
{
"last_affected": "2.7.4.2"
},
{
"introduced": "2.7.4.2"
},
{
"last_affected": "2.7.4.2"
},
{
"introduced": "2.7.4.3"
},
{
"last_affected": "2.7.4.3"
},
{
"introduced": "2.7.4.3"
},
{
"last_affected": "2.7.4.3"
},
{
"introduced": "2.7.4.4"
},
{
"last_affected": "2.7.4.4"
},
{
"introduced": "2.7.4.4"
},
{
"last_affected": "2.7.4.4"
},
{
"introduced": "2.7.4.5"
},
{
"last_affected": "2.7.4.5"
},
{
"introduced": "2.7.4.5"
},
{
"last_affected": "2.7.4.5"
},
{
"introduced": "2.7.4.6"
},
{
"last_affected": "2.7.4.6"
},
{
"introduced": "2.7.4.6"
},
{
"last_affected": "2.7.4.6"
},
{
"introduced": "2.7.4.7"
},
{
"last_affected": "2.7.4.7"
},
{
"introduced": "2.7.4.7"
},
{
"last_affected": "2.7.4.7"
},
{
"introduced": "2.7.4.8"
},
{
"last_affected": "2.7.4.8"
},
{
"introduced": "2.7.4.8"
},
{
"last_affected": "2.7.4.8"
},
{
"introduced": "2.7.4.9"
},
{
"last_affected": "2.7.4.9"
},
{
"introduced": "2.7.4.9"
},
{
"last_affected": "2.7.4.9"
},
{
"introduced": "2.7.4.11"
},
{
"last_affected": "2.7.4.11"
},
{
"introduced": "2.7.4.11"
},
{
"last_affected": "2.7.4.11"
},
{
"introduced": "2.7.4.12"
},
{
"last_affected": "2.7.4.12"
},
{
"introduced": "2.7.4.12"
},
{
"last_affected": "2.7.4.12"
},
{
"introduced": "2.7.4.13"
},
{
"last_affected": "2.7.4.13"
},
{
"introduced": "2.7.4.13"
},
{
"last_affected": "2.7.4.13"
},
{
"introduced": "3.6.1"
},
{
"last_affected": "3.6.1"
},
{
"introduced": "3.6.1"
},
{
"last_affected": "3.6.1"
},
{
"introduced": "3.6.2"
},
{
"last_affected": "3.6.2"
},
{
"introduced": "3.6.2"
},
{
"last_affected": "3.6.2"
},
{
"introduced": "3.6.3"
},
{
"last_affected": "3.6.3"
},
{
"introduced": "3.6.3"
},
{
"last_affected": "3.6.3"
},
{
"introduced": "3.6.4"
},
{
"last_affected": "3.6.4"
},
{
"introduced": "3.6.4"
},
{
"last_affected": "3.6.4"
},
{
"introduced": "3.6.5"
},
{
"last_affected": "3.6.5"
},
{
"introduced": "3.6.5"
},
{
"last_affected": "3.6.5"
},
{
"introduced": "3.6.6"
},
{
"last_affected": "3.6.6"
},
{
"introduced": "3.6.6"
},
{
"last_affected": "3.6.6"
},
{
"introduced": "3.6.7"
},
{
"last_affected": "3.6.7"
},
{
"introduced": "3.6.7"
},
{
"last_affected": "3.6.7"
},
{
"introduced": "3.9.1"
},
{
"last_affected": "3.9.1"
},
{
"introduced": "3.9.1"
},
{
"last_affected": "3.9.1"
},
{
"introduced": "3.9.2"
},
{
"last_affected": "3.9.2"
},
{
"introduced": "3.9.2"
},
{
"last_affected": "3.9.2"
},
{
"introduced": "3.9.3"
},
{
"last_affected": "3.9.3"
},
{
"introduced": "3.9.3"
},
{
"last_affected": "3.9.3"
},
{
"introduced": "3.9.4"
},
{
"last_affected": "3.9.4"
},
{
"introduced": "3.9.4"
},
{
"last_affected": "3.9.4"
},
{
"introduced": "3.9.5"
},
{
"last_affected": "3.9.5"
},
{
"introduced": "3.9.5"
},
{
"last_affected": "3.9.5"
},
{
"introduced": "3.9.6"
},
{
"last_affected": "3.9.6"
},
{
"introduced": "3.9.6"
},
{
"last_affected": "3.9.6"
},
{
"introduced": "3.9.7"
},
{
"last_affected": "3.9.7"
},
{
"introduced": "3.9.7"
},
{
"last_affected": "3.9.7"
},
{
"introduced": "3.9.8"
},
{
"last_affected": "3.9.8"
},
{
"introduced": "3.9.8"
},
{
"last_affected": "3.9.8"
},
{
"introduced": "3.9.9"
},
{
"last_affected": "3.9.9"
},
{
"introduced": "3.9.9"
},
{
"last_affected": "3.9.9"
},
{
"introduced": "3.9.12"
},
{
"last_affected": "3.9.12"
},
{
"introduced": "3.9.12"
},
{
"last_affected": "3.9.12"
},
{
"introduced": "3.9.13"
},
{
"last_affected": "3.9.13"
},
{
"introduced": "3.9.13"
},
{
"last_affected": "3.9.13"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2017-4973",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 434290,
"published_at": "2017-06-13T06:29:00.66+00:00"
}