← Back

CVE-2016-8218

nvd nist
Published: Jun 13, 2017Modified: May 13, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validation logic in JSON Web Token (JWT) libraries can allow unprivileged attackers to impersonate other users to the routing API, aka an "Unauthenticated JWT signing algorithm in routing" issue.

Affected (29)

Cloudfoundry
2 products
Cf Release
Routing Release
Configuration A
29 vulnerable
Vulnerable SoftwareAffected Versions
Cloudfoundry
Cf Release
Up to 203
Cf Release
Version 204
Cf Release
Version 205
Cf Release
Version 206
Cf Release
Version 207
Cf Release
Version 208
Cf Release
Version 209
Cf Release
Version 210
Cf Release
Version 211
Cf Release
Version 212
Cf Release
Version 213
Cf Release
Version 214
Cf Release
Version 215
Cf Release
Version 217
Cf Release
Version 218
Cf Release
Version 219
Cf Release
Version 220
Cf Release
Version 221
Cf Release
Version 222
Cf Release
Version 223
Cf Release
Version 224
Cf Release
Version 225
Cf Release
Version 226
Cf Release
Version 227
Cf Release
Version 228
Cf Release
Version 229
Cf Release
Version 230
Cf Release
Version 231
Routing Release
Up to 0.141.0

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

Source: security_alert@emc.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.