CVE-2017-4992: Privilege escalation with user invitations


Molly Crowther
 

Please see the following link for information on *critical* UAA
CVE CVE-2017-4992: Privilege escalation with user invitations

We tried to include more information this time about how to tell if you are
exploited, please let me know or reach out in the Cloud Foundry slack if
you have any further questions.

https://www.cloudfoundry.org/cve-2017-4992/

Friendly reminder that you can subscribe to new Cloud Foundry security
issues at: https://www.cloudfoundry.org/category/security/feed/

Thanks,
Molly Crowther
Cloud Foundry Foundation Security Team

Join {cf-dev@lists.cloudfoundry.org to automatically receive all group messages.