Description
A compromised or malicious BOSH Director can execute arbitrary shell commands on the operator's workstation when the operator runs bosh ssh (or bosh scp/bosh logs -f) with default flags.
Affected versions: BOSH CLI versions prior to 7.10.5.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CloudFoundry BOSH | BOSH CLI | < 7.10.5 | 7.10.5 |