CVE-2017-4960

An issue was discovered in Cloud Foundry release v247 through v252, UAA stand-alone release v3.9.0 through v3.11.0, and UAA Bosh Release v21 through v26. There is a potential to subject the UAA OAuth clients to a denial of service attack.

• http://www.securityfocus.com/bid/96780Third Party Advisory, VDB Entry
• https://www.cloudfoundry.org/cve-2017-4960/Vendor Advisory
• http://www.securityfocus.com/bid/96780Third Party Advisory, VDB Entry
• https://www.cloudfoundry.org/cve-2017-4960/Vendor Advisory

Published

Mar 10, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-4952VMware Xenon 1.x, prior to 1.5.4-CR7_1, 1.5.7_7, 1.5.4-CR6_2…
• CVE-2017-4955An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x…
• CVE-2017-4956Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-4957Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-4958Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-4959An issue was discovered in Pivotal PCF Elastic Runtime 1.8.x…
• CVE-2017-4961An issue was discovered in Cloud Foundry Foundation BOSH Rel…
• CVE-2017-4962Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-4963An issue was discovered in Cloud Foundry Foundation Cloud Fo…
• CVE-2017-4964Cloud Foundry Foundation BOSH Azure CPI v22 could potentiall…8.8
• CVE-2017-4965An issue was discovered in these Pivotal RabbitMQ versions: …6.1
• CVE-2017-4966An issue was discovered in these Pivotal RabbitMQ versions: …7.8