CVE-2017-4959

8.8 highEPSS 1.3%

An issue was discovered in Pivotal PCF Elastic Runtime 1.8.x versions prior to 1.8.29 and 1.9.x versions prior to 1.9.7. Pivotal Cloud Foundry deployments using the Pivotal Account application are vulnerable to a flaw which allows an authorized user to take over the account of another user, causing account lockout and potential escalation of privileges.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
Published: 2017-06-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

pivotal_software:cloud_foundry_elastic_runtime

References

http://www.securityfocus.com/bid/96218
https://pivotal.io/security/cve-2017-4959
http://www.securityfocus.com/bid/96218
https://pivotal.io/security/cve-2017-4959

Check your stack JSON