CWE Code: 22
Vulnerability Type: privilege_escalation
CVSS Score: 6.8
CWE Name:  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Summary: an issue was discovered in the cloud controller api in cloud foundry foundation capi-release versions prior to v1.35.0 and cf-release versions prior to v268. a filesystem traversal vulnerability exists in the cloud controller that allows a space developer to escalate privileges by pushing a specially crafted application that can write arbitrary files to the cloud controller vm.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2017-07-25
Last Modified Date: 2017-11-08