CVE-2016-0928
First published: Sun Sep 18 2016(Updated: )
Multiple open redirect vulnerabilities in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.30 and 1.7.x before 1.7.8 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Pivotal Elastic Runtime | <=1.6.29 | |
| Pivotal Elastic Runtime | =1.7.0 | |
| Pivotal Elastic Runtime | =1.7.1 | |
| Pivotal Elastic Runtime | =1.7.2 | |
| Pivotal Elastic Runtime | =1.7.3 | |
| Pivotal Elastic Runtime | =1.7.4 | |
| Pivotal Elastic Runtime | =1.7.5 | |
| Pivotal Elastic Runtime | =1.7.6 | |
| Pivotal Elastic Runtime | =1.7.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2016-0928?
CVE-2016-0928 is classified as a moderate severity vulnerability due to its potential for phishing attacks.
How do I fix CVE-2016-0928?
To fix CVE-2016-0928, upgrade Pivotal Cloud Foundry Elastic Runtime to version 1.6.30 or 1.7.8 or later.
What software is affected by CVE-2016-0928?
CVE-2016-0928 affects Pivotal Cloud Foundry Elastic Runtime versions prior to 1.6.30 and 1.7.x versions before 1.7.8.
Can CVE-2016-0928 be exploited for attacks?
Yes, CVE-2016-0928 can be exploited by remote attackers to redirect users to arbitrary websites.
What is the impact of CVE-2016-0928?
The impact of CVE-2016-0928 includes the potential for phishing attacks by redirecting users to malicious sites.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/pivotal
- canonical/pivotal elastic runtime
- version/pivotal elastic runtime/1.6.29
- version/pivotal elastic runtime/1.7.0
- version/pivotal elastic runtime/1.7.1
- version/pivotal elastic runtime/1.7.2
- version/pivotal elastic runtime/1.7.3
- version/pivotal elastic runtime/1.7.4
- version/pivotal elastic runtime/1.7.5
- version/pivotal elastic runtime/1.7.6
- version/pivotal elastic runtime/1.7.7