PT-2017-9537 · Cloud Foundry Foundation · Cf-Release+1

Publicado 2017-06-13 · Atualizado 2017-11-08 · CVE-2016-8218

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cloud Foundry Foundation routing-release versions prior to 0.142.0 Cloud Foundry Foundation cf-release versions 203 through 231

Description An issue exists due to incomplete validation logic in JSON Web Token (JWT) libraries, allowing unprivileged attackers to impersonate other users to the routing API.

Recommendations For routing-release versions prior to 0.142.0, update to version 0.142.0 or later. For cf-release versions 203 through 231, update to a version after 231.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2016-8218

Produtos afetados

Cf-Release

Routing-Release

Referências · 3

• https://osv.dev/vulnerability/CVE-2016-8218 · Aviso do Fabricante
• https://cloudfoundry.org/cve-2016-8218 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-8218 · Nota de Segurança