Vulnerabilities > Pivotal Software > Gemfire FOR Pivotal Cloud Foundry > 1.7.0

DATE	CVE	VULNERABILITY TITLE	RISK
2018-03-16	CVE-2016-9880	Improper Authentication vulnerability in Pivotal Software Gemfire for Pivotal Cloud Foundry 1.7.0 The GemFire broker for Cloud Foundry 1.6.x before 1.6.5 and 1.7.x before 1.7.1 has multiple API endpoints which do not require authentication and could be used to gain access to the cluster managed by the broker. network low complexity pivotal-software CWE-287 critical	9.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.