{"id":"CVE-2017-8037","details":"In Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.38.0 and cf-release versions after v244 and prior to v270, there is an incomplete fix for CVE-2017-8035. If you took steps to remediate CVE-2017-8035 you should also upgrade to fix this CVE. A carefully crafted CAPI request from a Space Developer can allow them to gain access to files on the Cloud Controller VM for that installation, aka an Information Leak / Disclosure.","modified":"2026-08-27T03:47:23.282878131Z","published":"2017-08-21T22:29:00.183Z","database_specific":{"unresolved_ranges":[{"vendor_product":"cloudfoundry:capi-release","cpes":["cpe:2.3:a:cloudfoundry:capi-release:1.7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.7.0"},{"last_affected":"1.7.0"}],"source":"CPE_STRING"}]},"references":[{"type":"WEB","url":"http://www.securityfocus.com/bid/100448"},{"type":"ADVISORY","url":"https://www.cloudfoundry.org/cve-2017-8037/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/cloudfoundry-attic/cf-release","events":[{"introduced":"1a84cd71377a1ac645f76c686156142ea0685067"},{"last_affected":"b31611aaecacf6c42a8ed226ac7d42a0974fccdc"}],"database_specific":{"cpe":["cpe:2.3:a:cloudfoundry:cf-release:245:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:246:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:247:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:248:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:249:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:250:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:251:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:252:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:253:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:254:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:255:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:256:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:257:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:258:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:259:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:260:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:261:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:262:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:263:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:264:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:265:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:266:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:267:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:268:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:269:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"245"},{"last_affected":"245"},{"introduced":"246"},{"last_affected":"246"},{"introduced":"247"},{"last_affected":"247"},{"introduced":"248"},{"last_affected":"248"},{"introduced":"249"},{"last_affected":"249"},{"introduced":"250"},{"last_affected":"250"},{"introduced":"251"},{"last_affected":"251"},{"introduced":"252"},{"last_affected":"252"},{"introduced":"253"},{"last_affected":"253"},{"introduced":"254"},{"last_affected":"254"},{"introduced":"255"},{"last_affected":"255"},{"introduced":"256"},{"last_affected":"256"},{"introduced":"257"},{"last_affected":"257"},{"introduced":"258"},{"last_affected":"258"},{"introduced":"259"},{"last_affected":"259"},{"introduced":"260"},{"last_affected":"260"},{"introduced":"261"},{"last_affected":"261"},{"introduced":"262"},{"last_affected":"262"},{"introduced":"263"},{"last_affected":"263"},{"introduced":"264"},{"last_affected":"264"},{"introduced":"265"},{"last_affected":"265"},{"introduced":"266"},{"last_affected":"266"},{"introduced":"267"},{"last_affected":"267"},{"introduced":"268"},{"last_affected":"268"},{"introduced":"269"},{"last_affected":"269"}],"source":"CPE_STRING"}}],"versions":["245","246","247","248","249","250","251","252","253","254","255","256","257","258","259","260","261","262","263","264","265","266","267","268","269","v269","v262","v260","v253","v249","v245"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-8037.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/cloudfoundry/capi-release","events":[{"introduced":"c952006df4174249d91e296c799ab54361822477"},{"last_affected":"0a024c74ec9b3080a99a9ea5cebaa2c0b4aaf1bf"}],"database_specific":{"source":"CPE_STRING","cpe":["cpe:2.3:a:cloudfoundry:capi-release:1.7.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.8.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.9.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.10.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.11.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.12.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.13.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.14.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.15.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.16.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.17.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.18.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.19.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.21.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.22.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.23.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.24.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.25.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.27.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.28.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.29.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.30.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.31.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.32.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.33.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.34.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.35.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.36.0:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:capi-release:1.37.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.7.0"},{"last_affected":"1.7.0"},{"introduced":"1.8.0"},{"last_affected":"1.8.0"},{"introduced":"1.9.0"},{"last_affected":"1.9.0"},{"introduced":"1.10.0"},{"last_affected":"1.10.0"},{"introduced":"1.11.0"},{"last_affected":"1.11.0"},{"introduced":"1.12.0"},{"last_affected":"1.12.0"},{"introduced":"1.13.0"},{"last_affected":"1.13.0"},{"introduced":"1.14.0"},{"last_affected":"1.14.0"},{"introduced":"1.15.0"},{"last_affected":"1.15.0"},{"introduced":"1.16.0"},{"last_affected":"1.16.0"},{"introduced":"1.17.0"},{"last_affected":"1.17.0"},{"introduced":"1.18.0"},{"last_affected":"1.18.0"},{"introduced":"1.19.0"},{"last_affected":"1.19.0"},{"introduced":"1.20.0"},{"last_affected":"1.20.0"},{"introduced":"1.21.0"},{"last_affected":"1.21.0"},{"introduced":"1.22.0"},{"last_affected":"1.22.0"},{"introduced":"1.23.0"},{"last_affected":"1.23.0"},{"introduced":"1.24.0"},{"last_affected":"1.24.0"},{"introduced":"1.25.0"},{"last_affected":"1.25.0"},{"introduced":"1.26.0"},{"last_affected":"1.26.0"},{"introduced":"1.27.0"},{"last_affected":"1.27.0"},{"introduced":"1.28.0"},{"last_affected":"1.28.0"},{"introduced":"1.29.0"},{"last_affected":"1.29.0"},{"introduced":"1.30.0"},{"last_affected":"1.30.0"},{"introduced":"1.31.0"},{"last_affected":"1.31.0"},{"introduced":"1.32.0"},{"last_affected":"1.32.0"},{"introduced":"1.33.0"},{"last_affected":"1.33.0"},{"introduced":"1.34.0"},{"last_affected":"1.34.0"},{"introduced":"1.35.0"},{"last_affected":"1.35.0"},{"introduced":"1.36.0"},{"last_affected":"1.36.0"},{"introduced":"1.37.0"},{"last_affected":"1.37.0"}]}}],"versions":["1.10.0","1.11.0","1.12.0","1.13.0","1.14.0","1.15.0","1.16.0","1.17.0","1.18.0","1.19.0","1.20.0","1.21.0","1.22.0","1.23.0","1.24.0","1.25.0","1.26.0","1.27.0","1.28.0","1.29.0","1.30.0","1.31.0","1.32.0","1.33.0","1.34.0","1.35.0","1.36.0","1.37.0","1.7.0","1.8.0","1.9.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-8037.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}