CVE-2016-6639

Cloud Foundry PHP Buildpack (aka php-buildpack) and PHP Buildpack Cf-release prior to 4.3.18 / 242 expose the .profile file in the htdocs directory, enabling remote HTTP GET requests to disclose sensitive information. Root cause: default exposure of .profile within the buildpack payload used by P...

CVE-2016-0928

The CVE pertains to Pivotal Cloud Foundry Elastic Runtime (PCF) with open redirect vulnerabilities in versions prior to 1.6.30 and 1.7.x before 1.7.8 . The underlying issue is open redirect flaws that allow remote attackers to redirect users to arbitrary external sites, enabling phishing when use...