CVE-2016-0896 in Cloud Foundry Elastic Runtime

Zusammenfassung

von MITRE

Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.34 and 1.7.x before 1.7.12 places 169.254.0.0/16 in the all_open Application Security Group, which might allow remote attackers to bypass intended network-connectivity restrictions by leveraging access to the 169.254.169.254 address.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservieren: 17.12.2015
• Veröffentlichung: 17.09.2016
• Moderieren: akzeptiert
• Eintrag: VDB-91640
• CPE: bereit
• CWE: CWE-254 (bestätigt)
• CVSS: 7.3 (NVD)
• EPSS: 0.00140
• KEV: nein
• Aktivitäten: very low
• Sektor: Industry, Hostingprovider, ...

Quellen

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-0896
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-0896
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-0896/