Vulnerabilities > CVE-2016-2169 - Code vulnerability in Cloudfoundry Capi-Release and Cf-Release

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

network

low complexity

cloudfoundry

CWE-17

NVD

Published: 2018-04-18

Updated: 2018-05-24

Summary

Cloud Foundry Cloud Controller, capi-release versions prior to 1.0.0 and cf-release versions prior to v237, contain a business logic flaw. An application developer may create an application with a route that conflicts with a platform service route and receive traffic intended for the service.

Vulnerable Configurations

Part	Description	Count
Application	Cloudfoundry Cloudfoundry Capi Release * Cloudfoundry CF Release 68 Cloudfoundry CF Release 69 Cloudfoundry CF Release 70 Cloudfoundry CF Release 71 Cloudfoundry CF Release 72 Cloudfoundry CF Release 73 Cloudfoundry CF Release 74 Cloudfoundry CF Release 75 Cloudfoundry CF Release 76 Cloudfoundry CF Release 77 Cloudfoundry CF Release 78 Cloudfoundry CF Release 79 Cloudfoundry CF Release 80 Cloudfoundry CF Release 81 Cloudfoundry CF Release 82 Cloudfoundry CF Release 83 Cloudfoundry CF Release 84 Cloudfoundry CF Release 85 Cloudfoundry CF Release 86 Cloudfoundry CF Release 87 Cloudfoundry CF Release 88 Cloudfoundry CF Release 89 Cloudfoundry CF Release 90 Cloudfoundry CF Release 91 Cloudfoundry CF Release 92 Cloudfoundry CF Release 93 Cloudfoundry CF Release 94 Cloudfoundry CF Release 95 Cloudfoundry CF Release 96 Cloudfoundry CF Release 97 Cloudfoundry CF Release 98 Cloudfoundry CF Release 99 Cloudfoundry CF Release 100 Cloudfoundry CF Release 101 Cloudfoundry CF Release 102 Cloudfoundry CF Release 103 Cloudfoundry CF Release 104 Cloudfoundry CF Release 105 Cloudfoundry CF Release 106 Cloudfoundry CF Release 107 Cloudfoundry CF Release 108 Cloudfoundry CF Release 109 Cloudfoundry CF Release 110 Cloudfoundry CF Release 111 Cloudfoundry CF Release 112 Cloudfoundry CF Release 113 Cloudfoundry CF Release 114 Cloudfoundry CF Release 115 Cloudfoundry CF Release 116 Cloudfoundry CF Release 117 Cloudfoundry CF Release 118 Cloudfoundry CF Release 119 Cloudfoundry CF Release 120 Cloudfoundry CF Release 121 Cloudfoundry CF Release 122 Cloudfoundry CF Release 123 Cloudfoundry CF Release 124 Cloudfoundry CF Release 125 Cloudfoundry CF Release 126 Cloudfoundry CF Release 127 Cloudfoundry CF Release 128 Cloudfoundry CF Release 129 Cloudfoundry CF Release 130 Cloudfoundry CF Release 131 Cloudfoundry CF Release 132 Cloudfoundry CF Release 133 Cloudfoundry CF Release 134 Cloudfoundry CF Release 135 Cloudfoundry CF Release 136 Cloudfoundry CF Release 137 Cloudfoundry CF Release 138 Cloudfoundry CF Release 139 Cloudfoundry CF Release 140 Cloudfoundry CF Release 141 Cloudfoundry CF Release 142 Cloudfoundry CF Release 143 Cloudfoundry CF Release 144 Cloudfoundry CF Release 145 Cloudfoundry CF Release 146 Cloudfoundry CF Release 147 Cloudfoundry CF Release 148 Cloudfoundry CF Release 149 Cloudfoundry CF Release 150 Cloudfoundry CF Release 151 Cloudfoundry CF Release 152 Cloudfoundry CF Release 153 Cloudfoundry CF Release 154 Cloudfoundry CF Release 155 Cloudfoundry CF Release 156 Cloudfoundry CF Release 157 Cloudfoundry CF Release 158 Cloudfoundry CF Release 159 Cloudfoundry CF Release 160 Cloudfoundry CF Release 161 Cloudfoundry CF Release 162 Cloudfoundry CF Release 163 Cloudfoundry CF Release 164 Cloudfoundry CF Release 165 Cloudfoundry CF Release 166 Cloudfoundry CF Release 167 Cloudfoundry CF Release 168 Cloudfoundry CF Release 169 Cloudfoundry CF Release 170 Cloudfoundry CF Release 171 Cloudfoundry CF Release 172 Cloudfoundry CF Release 173 Cloudfoundry CF Release 174 Cloudfoundry CF Release 175 Cloudfoundry CF Release 176 Cloudfoundry CF Release 177 Cloudfoundry CF Release 178 Cloudfoundry CF Release 179 Cloudfoundry CF Release 180 Cloudfoundry CF Release 181 Cloudfoundry CF Release 182 Cloudfoundry CF Release 183 Cloudfoundry CF Release 184 Cloudfoundry CF Release 185 Cloudfoundry CF Release 186 Cloudfoundry CF Release 187 Cloudfoundry CF Release 188 Cloudfoundry CF Release 189 Cloudfoundry CF Release 190 Cloudfoundry CF Release 191 Cloudfoundry CF Release 192 Cloudfoundry CF Release 193 Cloudfoundry CF Release 194 Cloudfoundry CF Release 195 Cloudfoundry CF Release 196 Cloudfoundry CF Release 197 Cloudfoundry CF Release 198 Cloudfoundry CF Release 199 Cloudfoundry CF Release 200 Cloudfoundry CF Release 201 Cloudfoundry CF Release 202 Cloudfoundry CF Release 203 Cloudfoundry CF Release 204 Cloudfoundry CF Release 205 Cloudfoundry CF Release 206 Cloudfoundry CF Release 207 Cloudfoundry CF Release 208 Cloudfoundry CF Release 209 Cloudfoundry CF Release 210 Cloudfoundry CF Release 211 Cloudfoundry CF Release 212 Cloudfoundry CF Release 213 Cloudfoundry CF Release 214 Cloudfoundry CF Release 215 Cloudfoundry CF Release 216 Cloudfoundry CF Release 217 Cloudfoundry CF Release 218 Cloudfoundry CF Release 219 Cloudfoundry CF Release 220 Cloudfoundry CF Release 221 Cloudfoundry CF Release 222 Cloudfoundry CF Release 223 Cloudfoundry CF Release 224 Cloudfoundry CF Release 225 Cloudfoundry CF Release 226 Cloudfoundry CF Release 227 Cloudfoundry CF Release 228 Cloudfoundry CF Release 229 Cloudfoundry CF Release 230 Cloudfoundry CF Release 231 Cloudfoundry CF Release 232 Cloudfoundry CF Release 233 Cloudfoundry CF Release 234 Cloudfoundry CF Release 235 Cloudfoundry CF Release 236	173
Hardware	Cloudfoundry Cloudfoundry Cloud Controller -	1

Common Weakness Enumeration (CWE)

CWE-17 - Code

References

https://github.com/cloudfoundry/cloud_controller_ng/issues/568