CVE-2016-4435

The CVE-2016-4435 issue affects the BOSH Agent endpoint on the Director VM, impacting stemcells version prior to 3232.6 and 3146.13. An unauthenticated client could read/write blobs or trigger a DoS by guessing a URL that matches an existing GUID. The Cloud Foundry advisory provides mitigation: u...

CVE-2016-4435 BOSH Agent Anonymous Endpoint | Cloud Foundry

CVE-2016-4435 BOSH Agent Anonymous Endpoint Medium Vendor Cloud Foundry Foundation Versions Affected BOSH stemcell versions prior to 3232.6 and 3146.13 Description An endpoint of the Agent running on the BOSH Director VM may allow unauthenticated clients to read or write blobs or cause a denial o...