Vulnerability CVE-2016-8218

Vulnerability CVE-2016-8218

Published: 2017-06-13

Description:

An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validation logic in JSON Web Token (JWT) libraries can allow unprivileged attackers to impersonate other users to the routing API, aka an "Unauthenticated JWT signing algorithm in routing" issue.

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score	Impact Subscore	Exploitability Subscore
7.5/10	6.4/10	10/10

Exploit range	Attack complexity	Authentication
Remote	Low	No required
Confidentiality impact	Integrity impact	Availability impact
Partial	Partial	Partial

Affected software
Cloud foundry -> Cf-release
Cloud foundry -> Routing-release
Cloudfoundry -> Cf-release
Cloudfoundry -> Routing-release

References:

https://www.cloudfoundry.org/cve-2016-8218/

Copyright 2024, cxsecurity.com