CVE-2017-4961: Cloud Foundry Bosh

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions. In certain cases an authenticated Director user can provide a malicious checksum that could allow them to escalate their privileges on the Director VM, aka "BOSH Director Shell Injection Vulnerabilities."

Affected products

• Cloud Foundry Bosh: version 260 only; version 260.1 only; version 260.2 only; version 260.3 only; version 260.4 only; version 260.5 only; …

Published 2017-06-13. Last modified 2026-06-17.