CVE-2016-0928

Published: Sep 18, 2016Modified: May 6, 2026

7.4

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N

Exploitability: 2.8 / Impact: 4.0

Source: NVD

Description

Multiple open redirect vulnerabilities in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.30 and 1.7.x before 1.7.8 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Affected (9)

Products: Pivotal: Cloud Foundry Elastic Runtime

Pivotal

1 product

Cloud Foundry Elastic Runtime

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Pivotal Cloud Foundry Elastic Runtime	Up to 1.6.29
Pivotal Cloud Foundry Elastic Runtime	Version 1.7.0
Pivotal Cloud Foundry Elastic Runtime	Version 1.7.1
Pivotal Cloud Foundry Elastic Runtime	Version 1.7.2
Pivotal Cloud Foundry Elastic Runtime	Version 1.7.3
Pivotal Cloud Foundry Elastic Runtime	Version 1.7.4
Pivotal Cloud Foundry Elastic Runtime	Version 1.7.5
Pivotal Cloud Foundry Elastic Runtime	Version 1.7.6
Pivotal Cloud Foundry Elastic Runtime	Version 1.7.7

Related CWEs

CWE-601

URL Redirection to Untrusted Site ('Open Redirect')

A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.

References (4)

http://www.securityfocus.com/bid/91550

Source: security_alert@emc.com

https://pivotal.io/security/cve-2016-0928

Source: security_alert@emc.com

Vendor Advisory

http://www.securityfocus.com/bid/91550

Source: af854a3a-2127-422b-91ae-364da2661108

https://pivotal.io/security/cve-2016-0928

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.