CVE-2016-5006

Critical

Published: 02/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The Cloud Controller in Cloud Foundry before version 239 logs user-provided service objects at creation, allowing attackers to obtain sensitive user credential information via unspecified vectors.

Risk Assessment

The organization may be exposed to the leakage of sensitive user data, potentially leading to unauthorized access to systems and resources.

Recommendation

It is recommended to upgrade Cloud Foundry to version 239 or later to mitigate this vulnerability and review logs to identify potential incidents.

Original NVD description (English source)

The Cloud Controller in Cloud Foundry before 239 logs user-provided service objects at creation, which allows attackers to obtain sensitive user credential information via unspecified vectors.