Sensitive Data Exposure in Cloud Foundry by Pivotal
CVE-2016-5006

9.8CRITICAL

Key Information:

Vendor

Pivotal Software

Status
Cloud Foundry Elastic Runtime
Cloud Foundry
Vendor
CVE Published:
2 May 2017

What is CVE-2016-5006?

The Cloud Controller in Cloud Foundry versions prior to 239 is vulnerable to a data exposure risk, where it logs user-provided service objects at the time of their creation. This flaw can be exploited by attackers to gain access to sensitive user credential information through various, yet unspecified, vectors. Mitigating this issue requires updating to the latest version of Cloud Foundry to enhance security and protect user data effectively.

References

https://www.cloudfoundry.org/CVE-2016-5006/
x_refsource_CONFIRM
https://pivotal.io/security/cve-2016-5006
x_refsource_CONFIRM

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.