CVE-2016-2169

Опубликовано: 18 апр. 2018

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

Cloud Foundry Cloud Controller, capi-release versions prior to 1.0.0 and cf-release versions prior to v237, contain a business logic flaw. An application developer may create an application with a route that conflicts with a platform service route and receive traffic intended for the service.

Ссылки

https://github.com/cloudfoundry/cloud_controller_ng/issues/568
Third Party Advisory
https://github.com/cloudfoundry/cloud_controller_ng/issues/568
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:cloudfoundry:capi-release:*:*:*:*:*:*:*:*

Версия до 1.0.0 (исключая)

cpe:2.3:h:cloudfoundry:cloud_controller:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:a:cloudfoundry:cf-release:*:*:*:*:*:*:*:*

Версия до 237 (исключая)

cpe:2.3:h:cloudfoundry:cloud_controller:-:*:*:*:*:*:*:*

EPSS

Процентиль: 46%

0.00237

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-17

Связанные уязвимости

GHSA-x468-qcc8-c34f