Vulnerabilities > CVE-2017-14389 - Unspecified vulnerability in Cloudfoundry Capi-Release

CVSS 4.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

SINGLE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

network

low complexity

cloudfoundry

NVD

Published: 2017-11-28

Updated: 2021-05-25

Summary

An issue was discovered in Cloud Foundry Foundation capi-release (all versions prior to 1.45.0), cf-release (all versions prior to v280), and cf-deployment (all versions prior to v1.0.0). The Cloud Controller does not prevent space developers from creating subdomains to an already existing route that belongs to a different user in a different org and space, aka an "Application Subdomain Takeover."

Vulnerable Configurations

Part	Description	Count
Application	Cloudfoundry Cloudfoundry Capi Release 1.0.0 Cloudfoundry Capi Release 1.1.0 Cloudfoundry Capi Release 1.2.0 Cloudfoundry Capi Release 1.3.0 Cloudfoundry Capi Release 1.4.0 Cloudfoundry Capi Release 1.5.0 Cloudfoundry Capi Release 1.6.0 Cloudfoundry Capi Release 1.7.0 Cloudfoundry Capi Release 1.8.0 Cloudfoundry Capi Release 1.9.0 Cloudfoundry Capi Release 1.10.0 Cloudfoundry Capi Release 1.11.0 Cloudfoundry Capi Release 1.12.0 Cloudfoundry Capi Release 1.13.0 Cloudfoundry Capi Release 1.14.0 Cloudfoundry Capi Release 1.15.0 Cloudfoundry Capi Release 1.16.0 Cloudfoundry Capi Release 1.17.0 Cloudfoundry Capi Release 1.18.0 Cloudfoundry Capi Release 1.19.0 Cloudfoundry Capi Release 1.20.0 Cloudfoundry Capi Release 1.21.0 Cloudfoundry Capi Release 1.22.0 Cloudfoundry Capi Release 1.23.0 Cloudfoundry Capi Release 1.24.0 Cloudfoundry Capi Release 1.25.0 Cloudfoundry Capi Release 1.26.0 Cloudfoundry Capi Release 1.27.0 Cloudfoundry Capi Release 1.28.0 Cloudfoundry Capi Release 1.29.0 Cloudfoundry Capi Release 1.30.0 Cloudfoundry Capi Release 1.31.0 Cloudfoundry Capi Release 1.32.0 Cloudfoundry Capi Release 1.33.0 Cloudfoundry Capi Release 1.34.0 Cloudfoundry Capi Release 1.35.0 Cloudfoundry Capi Release 1.36.0 Cloudfoundry Capi Release 1.37.0 Cloudfoundry Capi Release 1.38.0 Cloudfoundry Capi Release 1.39.0 Cloudfoundry Capi Release 1.40.0 Cloudfoundry Capi Release 1.40.15 Cloudfoundry Capi Release 1.40.17 Cloudfoundry Capi Release 1.40.18 Cloudfoundry Capi Release 1.40.19 Cloudfoundry Capi Release 1.40.20 Cloudfoundry Capi Release 1.40.23 Cloudfoundry Capi Release 1.40.24 Cloudfoundry Capi Release 1.40.33 Cloudfoundry Capi Release 1.40.34 Cloudfoundry Capi Release 1.40.35 Cloudfoundry Capi Release 1.40.38 Cloudfoundry Capi Release 1.40.39 Cloudfoundry Capi Release 1.40.40 Cloudfoundry Capi Release 1.40.41 Cloudfoundry Capi Release 1.40.42 Cloudfoundry Capi Release 1.40.43 Cloudfoundry Capi Release 1.40.44 Cloudfoundry Capi Release 1.40.45 Cloudfoundry Capi Release 1.40.46 Cloudfoundry Capi Release 1.40.47 Cloudfoundry Capi Release 1.40.48 Cloudfoundry Capi Release 1.40.49 Cloudfoundry Capi Release 1.40.50 Cloudfoundry Capi Release 1.40.51 Cloudfoundry Capi Release 1.40.52 Cloudfoundry Capi Release 1.40.53 Cloudfoundry Capi Release 1.40.54 Cloudfoundry Capi Release 1.41.0 Cloudfoundry Capi Release 1.42.0 Cloudfoundry Capi Release 1.43.0 Cloudfoundry Capi Release 1.44.0 Cloudfoundry Capi Release 1.44.6 Cloudfoundry Capi Release 1.44.7 Cloudfoundry Capi Release 1.44.10 Cloudfoundry Capi Release 1.44.11 Cloudfoundry Capi Release 1.44.12 Cloudfoundry Capi Release 1.44.13 Cloudfoundry Capi Release 1.44.14 Cloudfoundry Capi Release 1.44.15 Cloudfoundry Capi Release 1.44.17 Cloudfoundry Capi Release 1.44.18 Cloudfoundry Capi Release 1.44.20 Cloudfoundry Capi Release 1.44.22 Cloudfoundry Capi Release 1.44.23 Cloudfoundry Capi Release 1.44.24 Cloudfoundry Capi Release 1.44.25 Cloudfoundry Capi Release 1.44.26 Cloudfoundry Capi Release 1.44.27 Cloudfoundry Capi Release 1.44.28 Cloudfoundry Capi Release 1.44.29 Cloudfoundry Capi Release 1.44.30 Cloudfoundry Capi Release 1.44.31 Cloudfoundry Capi Release 1.44.32 Cloudfoundry Capi Release 1.44.33 Cloudfoundry Capi Release 1.44.34 Cloudfoundry Capi Release 1.44.35 Cloudfoundry Capi Release 1.44.36 Cloudfoundry Capi Release 1.44.37 Cloudfoundry CF Deployment 0.0.0 Cloudfoundry CF Deployment 0.0.1 Cloudfoundry CF Deployment 0.0.2 Cloudfoundry CF Deployment 0.1.0 Cloudfoundry CF Deployment 0.2.0 Cloudfoundry CF Deployment 0.2.1 Cloudfoundry CF Deployment 0.2.2 Cloudfoundry CF Deployment 0.3.0 Cloudfoundry CF Deployment 0.4.0 Cloudfoundry CF Deployment 0.5.0 Cloudfoundry CF Deployment 0.7.0 Cloudfoundry CF Deployment 0.8.0 Cloudfoundry CF Deployment 0.9.0 Cloudfoundry CF Deployment 0.9.1 Cloudfoundry CF Deployment 0.10.0 Cloudfoundry CF Deployment 0.11.0 Cloudfoundry CF Deployment 0.12.0 Cloudfoundry CF Deployment 0.13.0 Cloudfoundry CF Deployment 0.14.0 Cloudfoundry CF Deployment 0.15.0 Cloudfoundry CF Deployment 0.16.0 Cloudfoundry CF Deployment 0.17.0 Cloudfoundry CF Deployment 0.18.0 Cloudfoundry CF Deployment 0.19.0 Cloudfoundry CF Deployment 0.20.0 Cloudfoundry CF Deployment 0.21.0 Cloudfoundry CF Deployment 0.22.0 Cloudfoundry CF Deployment 0.23.0 Cloudfoundry CF Deployment 0.24.0 Cloudfoundry CF Deployment 0.25.0 Cloudfoundry CF Deployment 0.26.0 Cloudfoundry CF Deployment 0.27.0 Cloudfoundry CF Deployment 0.28.0 Cloudfoundry CF Deployment 0.29.0 Cloudfoundry CF Deployment 0.30.0 Cloudfoundry CF Deployment 0.31.0 Cloudfoundry CF Deployment 0.32.0 Cloudfoundry CF Deployment 0.32.1 Cloudfoundry CF Deployment 0.33.0 Cloudfoundry CF Deployment 0.34.0 Cloudfoundry CF Deployment 0.35.0 Cloudfoundry CF Deployment 0.36.0 Cloudfoundry CF Deployment 0.37.0 Cloudfoundry CF Release 68 Cloudfoundry CF Release 69 Cloudfoundry CF Release 70 Cloudfoundry CF Release 71 Cloudfoundry CF Release 72 Cloudfoundry CF Release 73 Cloudfoundry CF Release 74 Cloudfoundry CF Release 75 Cloudfoundry CF Release 76 Cloudfoundry CF Release 77 Cloudfoundry CF Release 78 Cloudfoundry CF Release 79 Cloudfoundry CF Release 80 Cloudfoundry CF Release 81 Cloudfoundry CF Release 82 Cloudfoundry CF Release 83 Cloudfoundry CF Release 84 Cloudfoundry CF Release 85 Cloudfoundry CF Release 86 Cloudfoundry CF Release 87 Cloudfoundry CF Release 88 Cloudfoundry CF Release 89 Cloudfoundry CF Release 90 Cloudfoundry CF Release 91 Cloudfoundry CF Release 92 Cloudfoundry CF Release 93 Cloudfoundry CF Release 94 Cloudfoundry CF Release 95 Cloudfoundry CF Release 96 Cloudfoundry CF Release 97 Cloudfoundry CF Release 98 Cloudfoundry CF Release 99 Cloudfoundry CF Release 100 Cloudfoundry CF Release 101 Cloudfoundry CF Release 102 Cloudfoundry CF Release 103 Cloudfoundry CF Release 104 Cloudfoundry CF Release 105 Cloudfoundry CF Release 106 Cloudfoundry CF Release 107 Cloudfoundry CF Release 108 Cloudfoundry CF Release 109 Cloudfoundry CF Release 110 Cloudfoundry CF Release 111 Cloudfoundry CF Release 112 Cloudfoundry CF Release 113 Cloudfoundry CF Release 114 Cloudfoundry CF Release 115 Cloudfoundry CF Release 116 Cloudfoundry CF Release 117 Cloudfoundry CF Release 118 Cloudfoundry CF Release 119 Cloudfoundry CF Release 120 Cloudfoundry CF Release 121 Cloudfoundry CF Release 122 Cloudfoundry CF Release 123 Cloudfoundry CF Release 124 Cloudfoundry CF Release 125 Cloudfoundry CF Release 126 Cloudfoundry CF Release 127 Cloudfoundry CF Release 128 Cloudfoundry CF Release 129 Cloudfoundry CF Release 130 Cloudfoundry CF Release 131 Cloudfoundry CF Release 132 Cloudfoundry CF Release 133 Cloudfoundry CF Release 134 Cloudfoundry CF Release 135 Cloudfoundry CF Release 136 Cloudfoundry CF Release 137 Cloudfoundry CF Release 138 Cloudfoundry CF Release 139 Cloudfoundry CF Release 140 Cloudfoundry CF Release 141 Cloudfoundry CF Release 142 Cloudfoundry CF Release 143 Cloudfoundry CF Release 144 Cloudfoundry CF Release 145 Cloudfoundry CF Release 146 Cloudfoundry CF Release 147 Cloudfoundry CF Release 148 Cloudfoundry CF Release 149 Cloudfoundry CF Release 150 Cloudfoundry CF Release 151 Cloudfoundry CF Release 152 Cloudfoundry CF Release 153 Cloudfoundry CF Release 154 Cloudfoundry CF Release 155 Cloudfoundry CF Release 156 Cloudfoundry CF Release 157 Cloudfoundry CF Release 158 Cloudfoundry CF Release 159 Cloudfoundry CF Release 160 Cloudfoundry CF Release 161 Cloudfoundry CF Release 162 Cloudfoundry CF Release 163 Cloudfoundry CF Release 164 Cloudfoundry CF Release 165 Cloudfoundry CF Release 166 Cloudfoundry CF Release 167 Cloudfoundry CF Release 168 Cloudfoundry CF Release 169 Cloudfoundry CF Release 170 Cloudfoundry CF Release 171 Cloudfoundry CF Release 172 Cloudfoundry CF Release 173 Cloudfoundry CF Release 174 Cloudfoundry CF Release 175 Cloudfoundry CF Release 176 Cloudfoundry CF Release 177 Cloudfoundry CF Release 178 Cloudfoundry CF Release 179 Cloudfoundry CF Release 180 Cloudfoundry CF Release 181 Cloudfoundry CF Release 182 Cloudfoundry CF Release 183 Cloudfoundry CF Release 184 Cloudfoundry CF Release 185 Cloudfoundry CF Release 186 Cloudfoundry CF Release 187 Cloudfoundry CF Release 188 Cloudfoundry CF Release 189 Cloudfoundry CF Release 190 Cloudfoundry CF Release 191 Cloudfoundry CF Release 192 Cloudfoundry CF Release 193 Cloudfoundry CF Release 194 Cloudfoundry CF Release 195 Cloudfoundry CF Release 196 Cloudfoundry CF Release 197 Cloudfoundry CF Release 198 Cloudfoundry CF Release 199 Cloudfoundry CF Release 200 Cloudfoundry CF Release 201 Cloudfoundry CF Release 202 Cloudfoundry CF Release 203 Cloudfoundry CF Release 204 Cloudfoundry CF Release 205 Cloudfoundry CF Release 206 Cloudfoundry CF Release 207 Cloudfoundry CF Release 208 Cloudfoundry CF Release 209 Cloudfoundry CF Release 210 Cloudfoundry CF Release 211 Cloudfoundry CF Release 212 Cloudfoundry CF Release 213 Cloudfoundry CF Release 214 Cloudfoundry CF Release 215 Cloudfoundry CF Release 216 Cloudfoundry CF Release 217 Cloudfoundry CF Release 218 Cloudfoundry CF Release 219 Cloudfoundry CF Release 220 Cloudfoundry CF Release 221 Cloudfoundry CF Release 222 Cloudfoundry CF Release 223 Cloudfoundry CF Release 224 Cloudfoundry CF Release 225 Cloudfoundry CF Release 226 Cloudfoundry CF Release 227 Cloudfoundry CF Release 228 Cloudfoundry CF Release 229 Cloudfoundry CF Release 230 Cloudfoundry CF Release 231 Cloudfoundry CF Release 232 Cloudfoundry CF Release 233 Cloudfoundry CF Release 234 Cloudfoundry CF Release 235 Cloudfoundry CF Release 236 Cloudfoundry CF Release 237 Cloudfoundry CF Release 238 Cloudfoundry CF Release 239 Cloudfoundry CF Release 240 Cloudfoundry CF Release 241 Cloudfoundry CF Release 242 Cloudfoundry CF Release 243 Cloudfoundry CF Release 244 Cloudfoundry CF Release 245 Cloudfoundry CF Release 246 Cloudfoundry CF Release 247 Cloudfoundry CF Release 248 Cloudfoundry CF Release 249 Cloudfoundry CF Release 250 Cloudfoundry CF Release 251 Cloudfoundry CF Release 252 Cloudfoundry CF Release 253 Cloudfoundry CF Release 254 Cloudfoundry CF Release 255 Cloudfoundry CF Release 256 Cloudfoundry CF Release 257 Cloudfoundry CF Release 258 Cloudfoundry CF Release 259 Cloudfoundry CF Release 260 Cloudfoundry CF Release 261 Cloudfoundry CF Release 262 Cloudfoundry CF Release 263 Cloudfoundry CF Release 264 Cloudfoundry CF Release 265 Cloudfoundry CF Release 266 Cloudfoundry CF Release 267 Cloudfoundry CF Release 268 Cloudfoundry CF Release 269 Cloudfoundry CF Release 270 Cloudfoundry CF Release 271 Cloudfoundry CF Release 272 Cloudfoundry CF Release 273 Cloudfoundry CF Release 274 Cloudfoundry CF Release 275 Cloudfoundry CF Release 276 Cloudfoundry CF Release 277 Cloudfoundry CF Release 278 Cloudfoundry CF Release 279	357

References

https://www.cloudfoundry.org/cve-2017-14389/