CVE-2016-6655

Critical

Published: 13/06/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A command injection vulnerability was discovered in Cloud Foundry in versions prior to v245 and in cf-mysql-release versions prior to v31. A malicious user may exploit numerous vectors to execute arbitrary commands on servers running Cloud Foundry.

Risk Assessment

This vulnerability poses a serious security risk, allowing attackers to remotely execute commands on servers, potentially leading to data loss or system takeover.

Recommendation

It is recommended to upgrade to the latest versions of Cloud Foundry and cf-mysql-release to mitigate this vulnerability. A security audit should also be conducted to identify potential threats.

Original NVD description (English source)

An issue was discovered in Cloud Foundry Foundation Cloud Foundry release versions prior to v245 and cf-mysql-release versions prior to v31. A command injection vulnerability was discovered in a common script used by many Cloud Foundry components. A malicious user may exploit numerous vectors to execute arbitrary commands on servers running Cloud Foundry.