CVE-2016-0883

CVE-2016-0883 affects Pivotal Cloud Foundry Ops Manager prior to 1.5.14 and 1.6.x prior to 1.6.9. The issue is that the same cookie-encryption key was used across different customers’ installations, enabling remote attackers to bypass session authentication by leveraging knowledge of the key from...

PT-2016-4442

Name of the Vulnerable Software and Affected Versions Pivotal Cloud Foundry PCF Ops Manager versions prior to 1.5.14 Pivotal Cloud Foundry PCF Ops Manager versions 1.6.x prior to 1.6.9 Description The issue allows remote attackers to bypass session authentication by leveraging knowledge of the...

CVE-2016-0883: Improper Authentication

Pivotal Cloud Foundry PCF Ops Manager before 1.5.14 and 1.6.x before 1.6.9 uses the same cookie-encryption key across different customers' installations, which allows remote attackers to bypass session authentication by leveraging knowledge of this key from another installation...