CVE-2017-4960

Description

An issue was discovered in Cloud Foundry release v247 through v252, UAA stand-alone release v3.9.0 through v3.11.0, and UAA Bosh Release v21 through v26. There is a potential to subject the UAA OAuth clients to a denial of service attack.

References

https://www.cloudfoundry.org/cve-2017-4960/

http://www.securityfocus.com/bid/96780

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3