CVE-2016-9880

The GemFire broker for Cloud Foundry 1.6.x before 1.6.5 and 1.7.x before 1.7.1 has multiple API endpoints which do not require authentication and could be used to gain access to the cluster managed by the broker.

Score

CVSS 3.0 9.8 Critical

Status

Modified - security_alert@emc.com

Published

2018-03-16

Last modified

2024-09-16

Weaknesses

CWE-287

Affected products

• Gemfire Broker For Cloud Foundry (Dell Emc)
• Gemfire For Pivotal Cloud Foundry (Pivotal Software)

References

• http://www.securityfocus.com/bid/96146
• https://pivotal.io/security/cve-2016-9880