CVE-2016-5006

The Cloud Controller in Cloud Foundry before 239 logs user-provided service objects at creation, which allows attackers to obtain sensitive user credential information via unspecified vectors.

Score

CVSS 3.0 9.8 Critical

Status

Modified - secalert@redhat.com

Published

2017-05-02

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Cloud Foundry (Pivotal Software)
• Cloud Foundry Elastic Runtime (Pivotal Software)

References

• https://pivotal.io/security/cve-2016-5006
• https://www.cloudfoundry.org/CVE-2016-5006/