CVE-2016-6651

🗓️ 30 Sep 2016 00:59:04Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 18 Views

The UAA /oauth/token endpoint in Pivotal Cloud Foundry (PCF) before 243 allows authenticated users to gain privileges by leveraging possession of a token

Reporter	Title	Published	Views	Family All 7
Cloud Foundry	CVE-2016-6651 Privilege Escalation in UAA \| Cloud Foundry	26 Sep 201600:00	–	cloudfoundry
CNVD	Elevation of Privilege Vulnerability in Multiple Pivotal Products	7 Oct 201600:00	–	cnvd
CVE	CVE-2016-6651	30 Sep 201600:00	–	cve
Cvelist	CVE-2016-6651	30 Sep 201600:00	–	cvelist
EUVD	EUVD-2016-7555	7 Oct 202500:30	–	euvd
OSV	CVE-2016-6651	30 Sep 201600:59	–	osv
Prion	Code injection	30 Sep 201600:59	–	prion

NVD

Node

cloudfoundry cloud_foundry_uaa_boshRange≤16.0

OR

pivotal_software cloud_foundryRange≤242.0

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.0

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.1

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.2

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.3

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.4

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.5

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.6

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.7

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.8

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.9

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.10

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.11

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.12

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.13

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.14

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.15

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.17

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.18

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.19

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.20

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.21

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.22

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.23

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.25

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.26

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.27

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.28

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.29

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.30

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.31

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.32

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.33

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.34

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.35

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.36

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.37

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.38

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.6.39

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.0

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.1

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.2

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.3

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.4

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.5

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.6

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.7

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.8

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.9

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.10

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.11

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.12

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.13

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.14

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.15

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.16

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.17

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.18

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.19

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.7.20

OR

pivotal_software cloud_foundry_elastic_runtimeMatch1.8.0

OR

pivotal_software cloud_foundry_ops_managerMatch1.7.0

OR

pivotal_software cloud_foundry_ops_managerMatch1.7.1

OR

pivotal_software cloud_foundry_ops_managerMatch1.7.2

OR

pivotal_software cloud_foundry_ops_managerMatch1.7.3

OR

pivotal_software cloud_foundry_ops_managerMatch1.7.4

OR

pivotal_software cloud_foundry_ops_managerMatch1.7.5

OR

pivotal_software cloud_foundry_ops_managerMatch1.7.6

OR

pivotal_software cloud_foundry_ops_managerMatch1.7.7

OR

pivotal_software cloud_foundry_ops_managerMatch1.7.8

OR

pivotal_software cloud_foundry_ops_managerMatch1.7.9

OR

pivotal_software cloud_foundry_ops_managerMatch1.7.10

OR

pivotal_software cloud_foundry_ops_managerMatch1.7.11

OR

pivotal_software cloud_foundry_ops_managerMatch1.7.12

OR

pivotal_software cloud_foundry_ops_managerMatch1.8.0

OR

pivotal_software cloud_foundry_uaaRange≤3.7.0

Source	Link
securityfocus	www.securityfocus.com/bid/93241
pivotal	www.pivotal.io/security/cve-2016-6651

06 May 2026 22:30Current

8.6High risk

Vulners AI Score8.6

CVSS 26.5

CVSS 38.8

EPSS0.00656

pivotal cloud foundry uaa oauth.