{
  "affected": [
    {
      "ranges": [
        {
          "database_specific": {
            "versions": [
              {
                "introduced": "0"
              },
              {
                "last_affected": "260"
              }
            ]
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "last_affected": "131c253c541e71d149ae3401052cc2431d257e77"
            }
          ],
          "repo": "https://github.com/cloudfoundry/cf-release",
          "type": "GIT"
        },
        {
          "database_specific": {
            "versions": [
              {
                "introduced": "0"
              },
              {
                "last_affected": "4.2.0"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "2.2.5.4"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "2.7.1"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "2.7.2"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "2.7.3"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "2.7.4"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "2.7.4.1"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "2.7.4.2"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "2.7.4.3"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "2.7.4.4"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "2.7.4.5"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "2.7.4.6"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "2.7.4.7"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "2.7.4.8"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "2.7.4.9"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "2.7.4.11"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "2.7.4.12"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "2.7.4.13"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "2.7.4.14"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "2.7.4.15"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "2.7.4.16"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.6.1"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.6.2"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.6.3"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.6.4"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.6.5"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.6.6"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.6.7"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.6.8"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.6.9"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.6.10"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.9.1"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.9.2"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.9.3"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.9.4"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.9.5"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.9.6"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.9.7"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.9.8"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.9.9"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.9.10"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.9.11"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.9.12"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.9.13"
              }
            ]
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "last_affected": "4bb775f81099c9eac8819688a7392bcd1a1fd758"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "7640c1433ec193b6696ee5e37a524a353fb3053e"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "79188ac64074380c3ac5ff8dc32468e73e1c4c4b"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "868d1b66623c20290f87c424a27cbf12220ef1fe"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "848792d60da36dc3cca6e4f98fc26c32ff1ad852"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "5260b65c7976c5214b7b9104573971285ee747e3"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "6f4197812dcb5da43b5c6bc2bed119c7cb51a649"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "07f14654fc27d74fbae8c8caccd2c08b6129d1b6"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "cb1cc7709fef43aa64933754b0e3f4fc2a4f46bd"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "7964980977c0e44eb42d264a6a1e4e9957b50d7c"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "3dd96319b33069208446af323e47b818b4b39a2e"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "a54d147a0a0f2bad89b3cb768338acd3009cc815"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "f0b459ddf0cc4fd738a412ce6586f24586266375"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "9bf7f52cbf5070f84110916f849f101b4cb87da7"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "fbec8291ff7c872b628dc3c648c8bfd3bb2e9c40"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "e77d4a20b321da8d958c2dfba86146f58e20e702"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "7dcb384183b4bb50bc30f1671d5bdeb6fdb01099"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "e0ad8af3ff5ccda7ec5d3cd393ba21ed4245cdb7"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "2fbc8f61e77d7d648330ee203d36b001d801a50e"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "242d89aef305d051b429f16a3bf761049f07cc75"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "be5cd3c1eb15c4af83265de3efc45f090b00a55e"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "a2b00c8b5a0d4bfba14318e3bfac506c2e2949d0"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "da04534573a6d5a53ad014f84bf5f855e0b2c6c0"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "74e080e1d99a63c8b29656189198fc743e95455e"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "ec11979e3e127c9fd89853a39ef79cdbf2cae2be"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "83e137053564ab2afefb7dffc589bca936fe7757"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "9d85a8a425e1ca3c17463d78dd67ae852539f0ce"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "c751caff52bc03366eae95db385511303fb5e42a"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "4b22749f89bd02ee4fca0c6b1873754ef83380fe"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "3d42346829976108a79f75cc7c76ef44836664d1"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "81134d6a574b91a007e429a11148b81b715b2c08"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "7623ebebfcb3864a979d769c125efffa82a292a4"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "69fc38968ecf6d0748acbfec7aac9ca32cf4ed3d"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "565bfebb000034c84d7853d4f9d387a8fc84c4bb"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "9e384778cbbb7f4aca143874cc3eb4dfc697ca8b"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "d75d7efa6328e04a4180f7ee18e1307dfa28dc2f"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "a2be849438dcb8ded19504742c0d8903eeef0418"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "b339df7cc4eb182c37deb9a9057093c2eb19e135"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "896455cacb36cdb349f14b493fc656cb12985ada"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "ffed4307232dc238ca9527716d176e68d9a25ce0"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "9b5866ce717ed4c783b9dd3c6dae84c1ccdc707d"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "60e113eebe5eea4e1533dace812278b094dd35e1"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "c0f3471997118e8be5abb272d3b7ceeea3c6d46a"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "acbc2bbf50068532d5a39a3a95163cb01ea14b25"
            }
          ],
          "repo": "https://github.com/cloudfoundry/uaa",
          "type": "GIT"
        },
        {
          "database_specific": {
            "versions": [
              {
                "introduced": "0"
              },
              {
                "last_affected": "27"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "13.1"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "13.2"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "13.3"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "13.4"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "13.5"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "13.6"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "13.7"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "13.8"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "13.9"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "13.10"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "13.11"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "13.12"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "13.13"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "13.14"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "24"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "24.1"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "24.2"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "24.3"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "24.4"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "24.5"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "24.6"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "24.7"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "24.8"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "24.9"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "30"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "30.1"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "30.2"
              }
            ]
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "last_affected": "5827452fcb119915c1410211c7d4606a9c39fede"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "9e9bc18c684b92f99e5ff97b857729ebb657f993"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "a32cb321fad9aacc1423f0b617699ea639037786"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "ba601cfabca2cc9524888dc624b4bee8d4b46472"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "aaab7a7d472e86d3dd2afb50187008a1852e45ac"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "5c023c50a25a0b970595fa165a851f57cd0092b7"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "fd97e7b7e21ffbc9f7ab3830b39016f08d644311"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "63e2ef4b54ca1cb3c462196053ea4b3324c9578a"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "63e2ef4b54ca1cb3c462196053ea4b3324c9578a"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "63e2ef4b54ca1cb3c462196053ea4b3324c9578a"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "ce61532638edae69f98687163d33f08e8022b97f"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "747cd9f9d22a2df42787baa85fa16ece5e2874ea"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "7279880d7387b610d6ccf775477b07cae12e149e"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "214e932a692ba4ec83a23b35f829324e1025a2e7"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "ae9cef18a0a6d5222b0c2a058b76e5061e4e1730"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "99f08c77b1f962f4db9b8e05666245d20037402a"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "d091d849287d64a790237ae8e3e3e535236aae77"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "fbd252040ba68495902876096dd447452a26bf64"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "acff6687d934bf827b809e108c55963a08463f30"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "c8e3c41b598e988d7c60551b4fd5ec9b182c062b"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "5d5ec0136d774da26566ca02f3b25648fd90433a"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "e19510139156fcef72e9f7453979ec75168e34c9"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "53d1d74f60c738ef1ecc81a463788ee3eb65c437"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "0e634b41cc5ea5bf73811a0317945002ab3c403f"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "3077d1c01c9489a941278d90ea88973caad4e14a"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "8c5ccff535f9fb3b924a3d1c52f795b0f8242054"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "7ddaaef684e51ca03c86a34361e704323419d5aa"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "cc0bff967af88f05814e5d3afe2d434a4219c4d0"
            }
          ],
          "repo": "https://github.com/cloudfoundry/uaa-release",
          "type": "GIT"
        }
      ]
    }
  ],
  "details": "An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x versions prior to v3.6.11, 3.9.x versions prior to v3.9.13, and other versions prior to v4.2.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.15, 24.x versions prior to v24.10, 30.x versions prior to 30.3, and other versions prior to v37. There is privilege escalation (arbitrary password reset) with user invitations.",
  "id": "CVE-2017-4992",
  "modified": "2026-03-13T21:47:15.511356824Z",
  "published": "2017-06-13T06:29:00.770Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.cloudfoundry.org/cve-2017-4992/"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}