CVE-2016-6655

An issue was discovered in Cloud Foundry Foundation Cloud Foundry release versions prior to v245 and cf-mysql-release versions prior to v31. A command injection vulnerability was discovered in a common script used by many Cloud Foundry components. A malicious user may exploit numerous vectors to execute arbitrary commands on servers running Cloud Foundry.

Score

CVSS 3.0 9.8 Critical

Status

Modified - security_alert@emc.com

Published

2017-06-13

Last modified

2024-08-06

Weaknesses

CWE-77

Affected products

• Cf-mysql-release (Cloudfoundry)
• Cf-release (Cloudfoundry)

References

• http://www.securityfocus.com/bid/93889
• https://www.cloudfoundry.org/cve-2016-6655/