CVE-2016-6658 - CVE House

Back to Database

Status published Critical CVE-2016-6658

Applications in cf-release before 245 can be configured and pushed...

9.6 CVSS

Vulnerability Description

Applications in cf-release before 245 can be configured and pushed with a user-provided custom buildpack using a URL pointing to the buildpack. Although it is not recommended, a user can specify a credential in the URL (basic auth or OAuth) to access the buildpack through the CLI. For example, the user could include a GitHub username and password in the URL to access a private repo. Because the URL to access the buildpack is stored unencrypted, an operator with privileged access to the Cloud Controller database could view these credentials.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-6658

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://pivotal.io/security/cve-2016-6658

More from cloudfoundry

View All →

Cloud Foundry Silk CNI plugin, versions prior to 0.2.0, contains...

Cloud Foundry Cloud Controller, versions prior to 1.52.0, contains information...

The UAA /oauth/token endpoint in Pivotal Cloud Foundry (PCF) before...

Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP...

Multiple cross-site request forgery (CSRF) vulnerabilities in Pivotal Cloud Foundry...

Affected Vendor

cloudfoundry

View all reports →

Affected Software

cf-release, cloud foundry elastic runtime

Vulnerable Versions:

0, 1.7.0, 1.8.0

Timeline

Official Publish: March 29th, 2018

Last Modified: August 6th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.