CVE-2016-6657: High severity pivotal cloud foundry ops manager vulnerability
An open redirect vulnerability has been detected with some Pivotal Cloud Foundry Elastic Runtime components. Users of affected versions should apply the following mitigation: Upgrade PCF Elastic Runtime 1.8.x versions to 1.8.12 or later. Upgrade PCF Ops Manager 1.7.x versions to 1.7.18 or later and 1.8.x versions to 1.8.10 or later.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-6657?
CVE-2016-6657 is classified as a medium-risk vulnerability due to its potential to facilitate open redirects.
How do I fix CVE-2016-6657?
To fix CVE-2016-6657, upgrade Pivotal Cloud Foundry Elastic Runtime to version 1.8.12 or later and Ops Manager to version 1.7.18 or later.
Which versions of Pivotal Cloud Foundry are affected by CVE-2016-6657?
CVE-2016-6657 affects Pivotal Cloud Foundry Ops Manager versions 1.7.0 to 1.7.17 and Elastic Runtime versions 1.8.0 to 1.8.11.
What components are affected by CVE-2016-6657?
CVE-2016-6657 affects certain components within the Pivotal Cloud Foundry Elastic Runtime and Ops Manager.
Is there a workaround for CVE-2016-6657?
The recommended mitigation for CVE-2016-6657 is to apply the appropriate software upgrades as there are no effective workarounds.