CyberRota Analysis
AI-GeneratedA vulnerability exists in BOSH CLI versions prior to 7.10.5, allowing a compromised BOSH Director to execute arbitrary shell commands on an operator's workstation when using commands like bosh ssh, bosh scp, or bosh logs -f with default flags. This poses a significant risk as it could lead to unauthorized access and control over the operator's environment. Organizations utilizing BOSH CLI for deployment and management should prioritize upgrading to mitigate potential exploitation.
Original NVD Description
A compromised or malicious BOSH Director can execute arbitrary shell commands on the operator's workstation when the operator runs bosh ssh (or bosh scp/bosh logs -f) with default flags. Affected versions: BOSH CLI versions prior to 7.10.5.
Related CVEs
Other vulnerabilities affecting the same vendor(s)