CVE-2017-4961

https://notcve.org/view.php?id=CVE-2017-4961

13 Jun 2017 — An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions. In certain cases an authenticated Director user can provide a malicious checksum that could allow them to escalate their privileges on the Director VM, aka "BOSH Director Shell Injection Vulnerabilities." Se detectó un problema en las versiones de BOSH versión 261.x anteriores a 261.3 y en todas las versiones de 260.x de Cloud Foundry Foundation. En ciertos casos, un usuario Director identi... • https://www.cloudfoundry.org/cve-2017-4961 • CWE-354: Improper Validation of Integrity Check Value •