CVE-2016-2169

2016-03-2300:00:00

dell

www.cve.org

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.1%

JSON

Cloud Foundry Cloud Controller, capi-release versions prior to 1.0.0 and cf-release versions prior to v237, contain a business logic flaw. An application developer may create an application with a route that conflicts with a platform service route and receive traffic intended for the service.

CNA Affected

[
  {
    "product": "Cloud Controller",
    "vendor": "Cloud Foundry",
    "versions": [
      {
        "status": "affected",
        "version": "capi-release prior to 1.0.0, cf-release prior to v237"
      }
    ]
  }
]

References

github.com/cloudfoundry/cloud_controller_ng/issues/568