CVE-2016-5016

Published: Apr 24, 2017Modified: May 13, 2026

5.9

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

Pivotal Cloud Foundry 239 and earlier, UAA (aka User Account and Authentication Server) 3.4.1 and earlier, UAA release 12.2 and earlier, PCF (aka Pivotal Cloud Foundry) Elastic Runtime 1.6.x before 1.6.35, and PCF Elastic Runtime 1.7.x before 1.7.13 does not validate if a certificate is expired.

Affected (5)

Products: Pivotal Software: Cloud Foundry, Cloud Foundry Elastic Runtime, Cloud Foundry Uaa, Cloud Foundry Uaa Release

Pivotal Software

4 products

Cloud Foundry Elastic Runtime

Cloud Foundry Uaa

Cloud Foundry Uaa Release

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Pivotal Software Cloud Foundry	Up to 239
Pivotal Software Cloud Foundry Elastic Runtime	From 1.6.0 to 1.6.35
Pivotal Software Cloud Foundry Elastic Runtime	From 1.7.0 to 1.7.13
Pivotal Software Cloud Foundry Uaa	Up to 3.4.1
Pivotal Software Cloud Foundry Uaa Release	Up to 12.2

Related CWEs

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (14)

https://github.com/cloudfoundry/cf-release/releases/tag/v240

Source: secalert@redhat.com

Release NotesThird Party Advisory

https://github.com/cloudfoundry/uaa-release/releases/tag/v11.3

Source: secalert@redhat.com

Release NotesThird Party Advisory

https://github.com/cloudfoundry/uaa-release/releases/tag/v12.3

Source: secalert@redhat.com

Release NotesThird Party Advisory

https://github.com/cloudfoundry/uaa/releases/tag/2.7.4.6

Source: secalert@redhat.com

Release NotesThird Party Advisory

https://github.com/cloudfoundry/uaa/releases/tag/3.3.0.3

Source: secalert@redhat.com

Release NotesThird Party Advisory

https://github.com/cloudfoundry/uaa/releases/tag/3.4.2

Source: secalert@redhat.com

Release NotesThird Party Advisory

https://pivotal.io/security/cve-2016-5016

Source: secalert@redhat.com

Vendor Advisory

https://github.com/cloudfoundry/cf-release/releases/tag/v240

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesThird Party Advisory

https://github.com/cloudfoundry/uaa-release/releases/tag/v11.3

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesThird Party Advisory

https://github.com/cloudfoundry/uaa-release/releases/tag/v12.3

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesThird Party Advisory

https://github.com/cloudfoundry/uaa/releases/tag/2.7.4.6

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesThird Party Advisory

https://github.com/cloudfoundry/uaa/releases/tag/3.3.0.3

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesThird Party Advisory

https://github.com/cloudfoundry/uaa/releases/tag/3.4.2

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesThird Party Advisory

https://pivotal.io/security/cve-2016-5016

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.