GCVE - cpe:2.3:a:n/a:pcf_elastic_runtime:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:pcf_elastic_runtime:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	N/A (`22f567d3-1203-528c-8f0e-3eb9c2f6ca78`)
Product	Pcf Elastic Runtime (`d7bcb0f9-eeb3-5036-af9b-5c2acf77d828`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-4959`	vulnerable	2026-06-08 05:09:38.711858	Details available An issue was discovered in Pivotal PCF Elastic Runtime 1.8.x versions prior to 1.8.29 and 1.9.x versions prior to 1.9.7. Pivotal Cloud Foundry deployments using the Pivotal Account application are vulnerable to a flaw which allows an authorized user to take over the account of another user, causing account lockout and potential escalation of privileges. Published: 2017-06-13T06:00:00.000Z Updated: 2024-08-05T14:47:43.745Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/96218 https://pivotal.io/security/cve-2017-4959	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-4955`	vulnerable	2026-06-08 05:09:38.634174	Details available An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.65, 1.7.x versions prior to 1.7.48, 1.8.x versions prior to 1.8.28, and 1.9.x versions prior to 1.9.5. Several credentials were present in the logs for the Notifications errand in the PCF Elastic Runtime tile. Published: 2017-06-13T06:00:00.000Z Updated: 2024-08-05T14:47:44.061Z Open on db.gcve.eu Reference links https://pivotal.io/security/cve-2017-4955 http://www.securityfocus.com/bid/97082	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-2773`	vulnerable	2026-06-08 05:09:25.885500	Details available An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.60, 1.7.x versions prior to 1.7.41, 1.8.x versions prior to 1.8.23, and 1.9.x versions prior to 1.9.1. Incomplete validation logic in JSON Web Token (JWT) libraries can allow unprivileged attackers to impersonate other users in multiple components included in PCF Elastic Runtime, aka an "Unauthenticated JWT signing algorithm in multiple components" issue. Published: 2017-06-13T06:00:00.000Z Updated: 2024-08-05T14:02:07.773Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/97135 https://pivotal.io/security/cve-2017-2773	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.