PT-2016-7025

CVE-2016-6657

·

Published

2016-12-16

·

Updated

2016-12-22

Description by

CVSS 3.1
7.4
High
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Pivotal Cloud Foundry Elastic Runtime versions prior to 1.8.12 Pivotal Cloud Foundry Ops Manager versions prior to 1.7.18 and versions prior to 1.8.10
Description An open redirect issue has been identified in certain Pivotal Cloud Foundry Elastic Runtime components.
Recommendations Upgrade PCF Elastic Runtime to version 1.8.12 or later. Upgrade PCF Ops Manager 1.7.x versions to version 1.7.18 or later. Upgrade PCF Ops Manager 1.8.x versions to version 1.8.10 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-601: URL Redirection to Untrusted Site (\'Open Redirect\')
Related identifiers
CVE-2016-6657
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com