CVE-2016-9880 The GemFire broker for Cloud Foundry 1.6.x before 1.6.5 and 1.7.x before 1.7.1 has multiple API endpoints which do not require authentication and could be used to gain access to the cluster managed by...
CriticalCVSS 9.8
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The GemFire broker for Cloud Foundry 1.6.x before 1.6.5 and 1.7.x before 1.7.1 has multiple API endpoints which do not require authentication and could be used to gain access to the cluster managed by the broker.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pivotal software gemfire for pivotal cloud foundry | >= 1.6.0, < 1.6.5 | 1.6.5 |
| pivotal software gemfire for pivotal cloud foundry | = 1.7.0 | No fix listed |
| Dell EMC GemFire broker for Cloud Foundry | = 1.6.x versions prior to 1.6.5 | No fix listed |
| Dell EMC GemFire broker for Cloud Foundry | = 1.7.x versions prior to 1.7.1 | No fix listed |
References
- 96146 third-party-advisory vdb-entry
- pivotal.io vendor-advisory