CVE-2016-6655: Command Injection
An issue was discovered in Cloud Foundry Foundation Cloud Foundry release versions prior to v245 and cf-mysql-release versions prior to v31. A command injection vulnerability was discovered in a common script used by many Cloud Foundry components. A malicious user may exploit numerous vectors to execute arbitrary commands on servers running Cloud Foundry.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-6655?
CVE-2016-6655 is classified as a high severity command injection vulnerability.
How do I fix CVE-2016-6655?
To fix CVE-2016-6655, upgrade Cloud Foundry Foundation Cloud Foundry release to version 245 or later and cf-mysql-release to version 31 or later.
What components are affected by CVE-2016-6655?
CVE-2016-6655 affects numerous components of Cloud Foundry that utilize a common script which is susceptible to command injection.
Can a malicious user exploit CVE-2016-6655?
Yes, a malicious user can exploit CVE-2016-6655 through various vectors to execute arbitrary commands.
What are the affected versions of Cloud Foundry for CVE-2016-6655?
The affected versions of Cloud Foundry are versions prior to v245 for cf-release and versions prior to v31 for cf-mysql-release.