Certificate Validation Flaw in Pivotal Cloud Foundry and UAA by Pivotal
CVE-2016-5016

5.9MEDIUM

Key Information:

Vendor: Pivotal Software
Status: Cloud Foundry Uaa; Cloud Foundry; Cloud Foundry Elastic Runtime; Cloud Foundry Uaa-release
Vendor: CVE Published:; 24 April 2017

🔔 Create Pivotal Software Vulnerability Alert

What is CVE-2016-5016?

The vulnerability arises in Pivotal Cloud Foundry and its User Account and Authentication Server (UAA), where the system fails to validate if a provided certificate is expired. This oversight could potentially allow unauthorized access or facilitate man-in-the-middle attacks, jeopardizing the security of applications running on the Pivotal platform. It is crucial for users to upgrade to fixed versions to mitigate these risks.