CVE-2016-6657

An open redirect vulnerability has been detected with some Pivotal Cloud Foundry Elastic Runtime components. Users of affected versions should apply the following mitigation: Upgrade PCF Elastic Runtime 1.8.x versions to 1.8.12 or later. Upgrade PCF Ops Manager 1.7.x versions to 1.7.18 or later and 1.8.x versions to 1.8.10 or later.

Score

CVSS 3.0 7.4 High

Status

Modified - security_alert@emc.com

Published

2016-12-16

Last modified

2024-08-06

Weaknesses

CWE-601

Affected products

• Cloud Foundry Elastic Runtime (Pivotal Software)
• Cloud Foundry Ops Manager (Pivotal Software)

References

• http://www.securityfocus.com/bid/94126
• https://pivotal.io/security/cve-2016-6657