PT-2016-4451

Name of the Vulnerable Software and Affected Versions Pivotal Cloud Foundry PCF Elastic Runtime versions 1.6.0 through 1.6.33 Pivotal Cloud Foundry PCF Elastic Runtime versions 1.7.0 through 1.7.11 Description The issue allows remote attackers to bypass intended network-connectivity restrictions ...

CVE-2016-0896: Undefined Security Weakness

Pivotal Cloud Foundry PCF Elastic Runtime before 1.6.34 and 1.7.x before 1.7.12 places 169.254.0.0/16 in the allopen Application Security Group, which might allow remote attackers to bypass intended network-connectivity restrictions by leveraging access to the 169.254.169.254 address...