CVE-2016-6659

Cloud Foundry before 248; UAA 2.x before 2.7.4.12, 3.x before 3.6.5, and 3.7.x through 3.9.x before 3.9.3; and UAA bosh release aka uaa-release before 13.9 for UAA 3.6.5 and before 24 for UAA 3.9.3 allow attackers to gain privileges by accessing UAA logs and subsequently running a specially craft...

Code injection

Cloud Foundry before 248; UAA 2.x before 2.7.4.12, 3.x before 3.6.5, and 3.7.x through 3.9.x before 3.9.3; and UAA bosh release aka uaa-release before 13.9 for UAA 3.6.5 and before 24 for UAA 3.9.3 allow attackers to gain privileges by accessing UAA logs and subsequently running a specially craft...

PT-2016-7026

Name of the Vulnerable Software and Affected Versions Cloud Foundry versions prior to 248 UAA versions 2.x prior to 2.7.4.12 UAA versions 3.x prior to 3.6.5 UAA versions 3.7.x through 3.9.x prior to 3.9.3 UAA bosh release aka uaa-release versions prior to 13.9 for UAA 3.6.5 UAA bosh release aka...