CVE-2016-2169 Cloud Foundry Cloud Controller, capi-release versions prior to 1.0.0 and cf-release versions prior to v237, contain a business logic flaw. An application developer may create an application with a rou...
MediumCVSS 5.3
EPSS 0.97%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cloud Foundry Cloud Controller, capi-release versions prior to 1.0.0 and cf-release versions prior to v237, contain a business logic flaw. An application developer may create an application with a route that conflicts with a platform service route and receive traffic intended for the service.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cloudfoundry capi-release | < 1.0.0 | 1.0.0 |
| cloudfoundry cf-release | < 237 | 237 |
| Cloud Foundry Cloud Controller | = capi-release prior to 1.0.0, cf-release prior to v237 | No fix listed |
References
- github.com third-party-advisory