CVE-2016-0928 in Cloud Foundry Elastic Runtime

Summary

Multiple open redirect vulnerabilities in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.30 and 1.7.x before 1.7.8 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 12/17/2015
• Disclosure: 09/17/2016
• Moderation: VulDB entry created
• Entries: VDB-91645 (1)
• CPE: ready
• CWE: CWE-601 (Confirmed)
• CVSS: 7.4
• EPSS: 0.00217
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-0928
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-0928
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-0928/