CVE-2016-5006 The Cloud Controller in Cloud Foundry before 239 logs user-provided service objects at creation, which allows attackers to obtain sensitive user credential information via unspecified vectors.
CriticalCVSS 9.8
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Cloud Controller in Cloud Foundry before 239 logs user-provided service objects at creation, which allows attackers to obtain sensitive user credential information via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pivotal software cloud foundry | <= 238.0 | No fix listed |
| pivotal software cloud foundry elastic runtime | <= 1.6.32 | No fix listed |
| pivotal software cloud foundry elastic runtime | = 1.7.0 | No fix listed |
| pivotal software cloud foundry elastic runtime | = 1.7.1 | No fix listed |
| pivotal software cloud foundry elastic runtime | = 1.7.2 | No fix listed |
| pivotal software cloud foundry elastic runtime | = 1.7.3 | No fix listed |
| pivotal software cloud foundry elastic runtime | = 1.7.4 | No fix listed |
| pivotal software cloud foundry elastic runtime | = 1.7.5 | No fix listed |
| pivotal software cloud foundry elastic runtime | = 1.7.6 | No fix listed |
| pivotal software cloud foundry elastic runtime | = 1.7.7 | No fix listed |
| pivotal software cloud foundry elastic runtime | = 1.7.8 | No fix listed |
| pivotal software cloud foundry elastic runtime | = 1.7.9 | No fix listed |
| pivotal software cloud foundry elastic runtime | = 1.7.10 | No fix listed |
References
- pivotal.io vendor-advisory
- www.cloudfoundry.org vendor-advisory