CVE-2016-8218
CriticalSummary
An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validation logic in JSON Web Token (JWT) libraries can allow unprivileged attackers to impersonate other users to the routing API.
Risk Assessment
Attackers may gain access to the routing API, potentially leading to unauthorized access to user data and system resources.
Recommendation
It is recommended to upgrade to the latest versions of routing-release and cf-release to mitigate this security vulnerability.
Original NVD description (English source)
An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validation logic in JSON Web Token (JWT) libraries can allow unprivileged attackers to impersonate other users to the routing API, aka an "Unauthenticated JWT signing algorithm in routing" issue.