CVE-2016-6657

High

Published: 16/12/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

An open redirect vulnerability has been detected in some Pivotal Cloud Foundry Elastic Runtime components. Users of affected versions should upgrade their software to the specified versions.

Risk Assessment

This vulnerability may lead to unauthorized redirection of users, posing a risk of data theft or phishing attacks.

Recommendation

It is recommended to upgrade PCF Elastic Runtime to version 1.8.12 or later and PCF Ops Manager to version 1.7.18 or later for 1.7.x versions and 1.8.10 or later for 1.8.x versions.

Other vulnerabilities in Pivotal Cloud Foundry Elastic Runtime

CVE-2016-0896High
Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.34 and 1.7.x before 1.7.12 places the 169.254.0.0/16 address in the all_open Application Security Group, which might allow remote attackers to bypass intended network-connectivity restrictions.

Original NVD description (English source)

An open redirect vulnerability has been detected with some Pivotal Cloud Foundry Elastic Runtime components. Users of affected versions should apply the following mitigation: Upgrade PCF Elastic Runtime 1.8.x versions to 1.8.12 or later. Upgrade PCF Ops Manager 1.7.x versions to 1.7.18 or later and 1.8.x versions to 1.8.10 or later.