vulnwire
9.6crit

CVE-2016-6637

Cloud Foundry vulnerable to Cross-Site Request Forgery

Also known as GHSA-4m8c-h7fr-gq5c

Published 10 y ago · modified 4 mo ago · JSON

CVSS
9.6
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.7%
percentile 54%
Public exploits
0
none known

Multiple cross-site request forgery (CSRF) vulnerabilities in Pivotal Cloud Foundry (PCF) before 242; UAA 2.x before 2.7.4.7, 3.x before 3.3.0.5, and 3.4.x before 3.4.4; UAA BOSH before 11.5 and 12.x before 12.5; Elastic Runtime before 1.6.40, 1.7.x before 1.7.21, and 1.8.x before 1.8.2; and Ops Manager 1.7.x before 1.7.13 and 1.8.x before 1.8.1 allow remote attackers to hijack the authentication of unspecified victims for requests that approve or deny a scope via a profile or authorize approval page.

Exploit prediction (EPSS)

0.73% probability of exploitation in the next 30 days, higher than 54% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.09.6CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
NVD2.06.8AV:N/AC:M/Au:N/C:P/I:P/A:P
GitHub3.09.6CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected packages

EcosystemPackageAffectedFixed in
mavenorg.cloudfoundry.identity:cloudfoundry-identity-server
>=2.0.0, <2.7.4.7
>=3.0.0, <3.3.0.5
>=3.4.0, <3.4.4
>=3.5.0, <3.7.0
2.7.4.7
3.3.0.5
3.4.4
3.7.0

Classification

Weakness

References

  • securityfocus.com /bid/93245 · vdb-entry, x_refsource_BID, x_transferred
  • pivotal.io /security/cve-2016-6637 · x_refsource_CONFIRM, x_transferred
  • nvd.nist.gov /vuln/detail/CVE-2016-6637 · advisory
  • github.com /cloudfoundry/uaa/commit/37e0384c52d3337a3fa4eef6647032229edecfa4 · web
  • github.com /cloudfoundry/uaa/commit/cded6164a3b90e791688a954069aea3cfde59b69 · web
  • github.com /cloudfoundry/uaa/commit/f3d8a9e1ee1acac5bf1f8487ac9461f4cf4505c · web
  • web.archive.org /web/20200227221542/http://www.securityfocus.com/bid/93245 · web

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.