Cloud Foundry Capi Release
Approved changes feed: RSS · Atom
cpe:2.3:a:n/a:cloud_foundry_capi-release:_all_versions_prior_to_1.45.0,_cf-release:_all_versions_prior_to_v280,_cf-deployment:_all_versions_prior_to_v1.0.0:*:*:*:*:*:*:*:*
part: a version: _all_versions_prior_to_1.45.0,_cf-release update: _all_versions_prior_to_v280,_cf-deployment
| Vendor | N/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78) |
|---|---|
| Product | Cloud Foundry Capi Release (8bc27656-10c1-5785-ba3e-f078037282f1) |
| Edition | _all_versions_prior_to_v1.0.0 |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-14389 |
vulnerable | 2026-06-08 05:08:49.883112 |
Details available
An issue was discovered in Cloud Foundry Foundation capi-release (all versions prior to 1.45.0), cf-release (all versions prior to v280), and cf-deployment (all versions prior to v1.0.0). The Cloud Controller does not prevent space developers from creating subdomains to an already existing route that belongs to a different user in a different org and space, aka an "Application Subdomain Takeover."
Published: 2017-11-28T07:00:00.000Z
Updated: 2024-08-05T19:27:40.603Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.