CVE-2016-6651

First published: Fri Sep 30 2016(Updated: )

The UAA /oauth/token endpoint in Pivotal Cloud Foundry (PCF) before 243; UAA 2.x before 2.7.4.8, 3.x before 3.3.0.6, and 3.4.x before 3.4.5; UAA BOSH before 11.7 and 12.x before 12.6; Elastic Runtime before 1.6.40, 1.7.x before 1.7.21, and 1.8.x before 1.8.2; and Ops Manager 1.7.x before 1.7.13 and 1.8.x before 1.8.1 allows remote authenticated users to gain privileges by leveraging possession of a token.

Credit: security_alert@emc.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/severity
• agent/weakness
• agent/references
• agent/author
• agent/type
• agent/event
• agent/description
• agent/first-publish-date
• agent/last-modified-date
• agent/softwarecombine
• agent/tags
• collector/mitre-cve
• source/MITRE
• vendor/cloudfoundry
• canonical/cloudfoundry cloud foundry uaa bosh
• version/cloudfoundry cloud foundry uaa bosh/16.0
• vendor/pivotal software
• canonical/pivotal software cloud foundry
• version/pivotal software cloud foundry/242.0
• canonical/pivotal software cloud foundry elastic runtime
• version/pivotal software cloud foundry elastic runtime/1.6.0
• version/pivotal software cloud foundry elastic runtime/1.6.1
• version/pivotal software cloud foundry elastic runtime/1.6.2
• version/pivotal software cloud foundry elastic runtime/1.6.3
• version/pivotal software cloud foundry elastic runtime/1.6.4
• version/pivotal software cloud foundry elastic runtime/1.6.5
• version/pivotal software cloud foundry elastic runtime/1.6.6
• version/pivotal software cloud foundry elastic runtime/1.6.7
• version/pivotal software cloud foundry elastic runtime/1.6.8
• version/pivotal software cloud foundry elastic runtime/1.6.9
• version/pivotal software cloud foundry elastic runtime/1.6.10
• version/pivotal software cloud foundry elastic runtime/1.6.11
• version/pivotal software cloud foundry elastic runtime/1.6.12
• version/pivotal software cloud foundry elastic runtime/1.6.13
• version/pivotal software cloud foundry elastic runtime/1.6.14
• version/pivotal software cloud foundry elastic runtime/1.6.15
• version/pivotal software cloud foundry elastic runtime/1.6.17
• version/pivotal software cloud foundry elastic runtime/1.6.18
• version/pivotal software cloud foundry elastic runtime/1.6.19
• version/pivotal software cloud foundry elastic runtime/1.6.20
• version/pivotal software cloud foundry elastic runtime/1.6.21
• version/pivotal software cloud foundry elastic runtime/1.6.22
• version/pivotal software cloud foundry elastic runtime/1.6.23
• version/pivotal software cloud foundry elastic runtime/1.6.25
• version/pivotal software cloud foundry elastic runtime/1.6.26
• version/pivotal software cloud foundry elastic runtime/1.6.27
• version/pivotal software cloud foundry elastic runtime/1.6.28
• version/pivotal software cloud foundry elastic runtime/1.6.29
• version/pivotal software cloud foundry elastic runtime/1.6.30
• version/pivotal software cloud foundry elastic runtime/1.6.31
• version/pivotal software cloud foundry elastic runtime/1.6.32
• version/pivotal software cloud foundry elastic runtime/1.6.33
• version/pivotal software cloud foundry elastic runtime/1.6.34
• version/pivotal software cloud foundry elastic runtime/1.6.35
• version/pivotal software cloud foundry elastic runtime/1.6.36
• version/pivotal software cloud foundry elastic runtime/1.6.37
• version/pivotal software cloud foundry elastic runtime/1.6.38
• version/pivotal software cloud foundry elastic runtime/1.6.39
• version/pivotal software cloud foundry elastic runtime/1.7.0
• version/pivotal software cloud foundry elastic runtime/1.7.1
• version/pivotal software cloud foundry elastic runtime/1.7.2
• version/pivotal software cloud foundry elastic runtime/1.7.3
• version/pivotal software cloud foundry elastic runtime/1.7.4
• version/pivotal software cloud foundry elastic runtime/1.7.5
• version/pivotal software cloud foundry elastic runtime/1.7.6
• version/pivotal software cloud foundry elastic runtime/1.7.7
• version/pivotal software cloud foundry elastic runtime/1.7.8
• version/pivotal software cloud foundry elastic runtime/1.7.9
• version/pivotal software cloud foundry elastic runtime/1.7.10
• version/pivotal software cloud foundry elastic runtime/1.7.11
• version/pivotal software cloud foundry elastic runtime/1.7.12
• version/pivotal software cloud foundry elastic runtime/1.7.13
• version/pivotal software cloud foundry elastic runtime/1.7.14
• version/pivotal software cloud foundry elastic runtime/1.7.15
• version/pivotal software cloud foundry elastic runtime/1.7.16
• version/pivotal software cloud foundry elastic runtime/1.7.17
• version/pivotal software cloud foundry elastic runtime/1.7.18
• version/pivotal software cloud foundry elastic runtime/1.7.19
• version/pivotal software cloud foundry elastic runtime/1.7.20
• version/pivotal software cloud foundry elastic runtime/1.8.0
• canonical/pivotal software cloud foundry ops manager
• version/pivotal software cloud foundry ops manager/1.7.0
• version/pivotal software cloud foundry ops manager/1.7.1
• version/pivotal software cloud foundry ops manager/1.7.2
• version/pivotal software cloud foundry ops manager/1.7.3
• version/pivotal software cloud foundry ops manager/1.7.4
• version/pivotal software cloud foundry ops manager/1.7.5
• version/pivotal software cloud foundry ops manager/1.7.6
• version/pivotal software cloud foundry ops manager/1.7.7
• version/pivotal software cloud foundry ops manager/1.7.8
• version/pivotal software cloud foundry ops manager/1.7.9
• version/pivotal software cloud foundry ops manager/1.7.10
• version/pivotal software cloud foundry ops manager/1.7.11
• version/pivotal software cloud foundry ops manager/1.7.12
• version/pivotal software cloud foundry ops manager/1.8.0
• canonical/pivotal software cloud foundry uaa
• version/pivotal software cloud foundry uaa/3.7.0