CVE-2016-0930: Race Condition
Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.19 and 1.7.x before 1.7.10, when vCloud or vSphere is used, has a default password for compilation VMs, which allows remote attackers to obtain SSH access by connecting within an installation-time period during which these VMs exist.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0930?
CVE-2016-0930 is classified as a high severity vulnerability due to the potential for unauthorized SSH access.
How do I fix CVE-2016-0930?
To mitigate CVE-2016-0930, you should upgrade your Pivotal Cloud Foundry Ops Manager to version 1.6.19 or later, or 1.7.10 or later.
Which versions of Pivotal Cloud Foundry Ops Manager are affected by CVE-2016-0930?
CVE-2016-0930 affects Pivotal Cloud Foundry Ops Manager versions prior to 1.6.19 and 1.7.x before 1.7.10.
What type of attack does CVE-2016-0930 enable?
CVE-2016-0930 enables remote attackers to gain SSH access through default compilation VM passwords during the installation period.
Is CVE-2016-0930 related to cloud technology?
Yes, CVE-2016-0930 is particularly relevant for users of vCloud or vSphere in Pivotal Cloud Foundry installations.