CVE-2017-14389: Application Subdomain Takeover via Cloud Foundry Private Domains

Severity

High

Vendor

Cloud Foundry Foundation

Affected Cloud Foundry Products and Versions

• capi-release
  • All versions prior to 1.45.0
• cf-release
  • All versions prior to v280
• cf-deployment
  • All versions prior to v1.0.0

Description

The Cloud Controller does not prevent space developers from creating subdomains to an already existing route that belongs to a different user in a different org and space.

Mitigation

Users of affected versions should apply the following mitigations or upgrades:

• Releases that have fixed this issue include:
  • capi-release: 1.45.0
  • cf-release: 280
  • cf-deployment: 1.0.0

Credit

This issue was responsibly reported by the GE Digital Security Team.

References

• https://github.com/cloudfoundry/capi-release
• https://github.com/cloudfoundry/cf-release/releases
• https://github.com/cloudfoundry/cf-deployment/releases

History

2017-11-22: Initial vulnerability report published.