CVE-2016-0883 in Cloud Foundry Ops Manager
Zusammenfassung
von MITRE
Pivotal Cloud Foundry (PCF) Ops Manager before 1.5.14 and 1.6.x before 1.6.9 uses the same cookie-encryption key across different customers' installations, which allows remote attackers to bypass session authentication by leveraging knowledge of this key from another installation.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.