CVE-2016-6637

🗓️ 30 Sep 2016 00:00:00Reported by dellType

cve

cve🔗 web.nvd.nist.gov👁 40 Views

Multiple CSRF vulnerabilities in Pivotal Cloud Foundry (PCF) before 242; UAA 2.x before 2.7.4.7, 3.x before 3.3.0.5, and 3.4.x before 3.4.4; UAA BOSH before 11.5 and 12.x before 12.5; Elastic Runtime before 1.6.40, 1.7.x before 1.7.21, and 1.8.x before 1.8.2; and Ops Manager 1.7.x before 1.7.13 and 1.8.x before 1.8.1 allows remote attackers to hijack authentication

Reporter	Title	Published	Views	Family All 12
Cloud Foundry	CVE-2016-6637 UAA CSRF Vulnerability for OAuth Approvals \| Cloud Foundry	26 Sep 201600:00	–	cloudfoundry
CNVD	Cross-Site Request Forgery Vulnerability in Multiple Pivotal Products	7 Oct 201600:00	–	cnvd
Cvelist	CVE-2016-6637	30 Sep 201600:00	–	cvelist
EUVD	EUVD-2022-2408	3 Oct 202520:07	–	euvd
Github Security Blog	Cloud Foundry vulnerable to Cross-Site Request Forgery	13 May 202201:07	–	github
NVD	CVE-2016-6637	30 Sep 201600:59	–	nvd
OSV	CVE-2016-6637	30 Sep 201600:59	–	osv
OSV	GHSA-4M8C-H7FR-GQ5C Cloud Foundry vulnerable to Cross-Site Request Forgery	13 May 202201:07	–	osv
Prion	Cross site request forgery (csrf)	30 Sep 201600:59	–	prion
vulnersOsv	org.cloudfoundry.identity:cloudfoundry-identity-api (>=3.5.0 <=3.6.0), org.cloudfoundry.identity:cloudfoundry-identity-app (>=3.5.0 <=3.6.0) +1 more potentially affected by CVE-2016-6637 via org.cloudfoundry.identity:cloudfoundry-identity-server (>=3.5.0 <=3.6.0)	13 May 202201:07	–	vulnersosv

NVD

Node

cloudfoundry cloud_foundry_uaa_boshRange≤15.0

OR

pivotal_software cloud_foundryRange≤241

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.0

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.1

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.2

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.3

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.4

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.5

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.6

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.7

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.8

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.9

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.10

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.11

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.12

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.13

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.14

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.15

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.17

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.18

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.19

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.20

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.21

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.22

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.23

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.25

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.26

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.27

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.28

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.29

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.30

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.31

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.32

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.33

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.34

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.35

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.36

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.37

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.38

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.39

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.0

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.1

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.2

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.3

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.4

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.5

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.6

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.7

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.8

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.9

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.10

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.11

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.12

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.13

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.14

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.15

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.16

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.17

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.18

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.19

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.20

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.8.0

OR

pivotal_software cloud_foundry_ops_managerMatch1.7.0

OR

pivotal_software cloud_foundry_ops_managerMatch1.7.1

OR

pivotal_software cloud_foundry_ops_managerMatch1.7.2

OR

pivotal_software cloud_foundry_ops_managerMatch1.7.3

OR

pivotal_software cloud_foundry_ops_managerMatch1.7.4

OR

pivotal_software cloud_foundry_ops_managerMatch1.7.5

OR

pivotal_software cloud_foundry_ops_managerMatch1.7.6

OR

pivotal_software cloud_foundry_ops_managerMatch1.7.7

OR

pivotal_software cloud_foundry_ops_managerMatch1.7.8

OR

pivotal_software cloud_foundry_ops_managerMatch1.7.9

OR

pivotal_software cloud_foundry_ops_managerMatch1.7.10

OR

pivotal_software cloud_foundry_ops_managerMatch1.7.11

OR

pivotal_software cloud_foundry_ops_managerMatch1.7.12

OR

pivotal_software cloud_foundry_ops_managerMatch1.8.0

OR

pivotal_software cloud_foundry_uaaMatch2.3.0

OR

pivotal_software cloud_foundry_uaaMatch2.3.1

OR

pivotal_software cloud_foundry_uaaMatch2.4.0

OR

pivotal_software cloud_foundry_uaaMatch2.5.1

OR

pivotal_software cloud_foundry_uaaMatch2.6.1

OR

pivotal_software cloud_foundry_uaaMatch2.7.0.2

OR

pivotal_software cloud_foundry_uaaMatch2.7.0.3

OR

pivotal_software cloud_foundry_uaaMatch2.7.1

OR

pivotal_software cloud_foundry_uaaMatch2.7.2

OR

pivotal_software cloud_foundry_uaaMatch2.7.3

OR

pivotal_software cloud_foundry_uaaMatch2.7.4.6

OR

pivotal_software cloud_foundry_uaaMatch3.0.0

OR

pivotal_software cloud_foundry_uaaMatch3.0.1

OR

pivotal_software cloud_foundry_uaaMatch3.1.0

OR

pivotal_software cloud_foundry_uaaMatch3.2.0

OR

pivotal_software cloud_foundry_uaaMatch3.2.1

OR

pivotal_software cloud_foundry_uaaMatch3.3.0

OR

pivotal_software cloud_foundry_uaaMatch3.3.0.1

OR

pivotal_software cloud_foundry_uaaMatch3.4.0

OR

pivotal_software cloud_foundry_uaaMatch3.4.1

OR

pivotal_software cloud_foundry_uaaMatch3.4.2

Source	Link
securityfocus	www.securityfocus.com/bid/93245
pivotal	www.pivotal.io/security/cve-2016-6637

06 May 2026 22:30Current

9.5High risk

Vulners AI Score9.5

CVSS 26.8

CVSS 39.6

EPSS0.00118

cve-2016-6637 csrf pivotal cloud foundry pcf uaa elastic runtime ops manager authentication hijacking security vulnerability