CVE-2016-8220: Infoleak
Published Apr 18, 2018
·Updated
Pivotal Gemfire for PCF, versions 1.6.x prior to 1.6.5.0 and 1.7.x prior to 1.7.1.0, contain an information disclosure vulnerability. The application inadvertently exposed WAN replication credentials at a public route.
Affected Software
2 affected components
Pivotal Software Gemfire Pivotal Cloud Foundry>=1.6.0.0<1.6.5.0
Pivotal Software Gemfire Pivotal Cloud Foundry>=1.7.0.0<1.7.1.0
Event History
Apr 18, 2018
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-8220?
CVE-2016-8220 is classified as an information disclosure vulnerability.
2
How do I fix CVE-2016-8220?
To mitigate CVE-2016-8220, upgrade to Pivotal Gemfire for PCF version 1.6.5.0 or 1.7.1.0 or later.
3
What versions are affected by CVE-2016-8220?
CVE-2016-8220 affects Pivotal Gemfire for PCF versions 1.6.x prior to 1.6.5.0 and 1.7.x prior to 1.7.1.0.
4
What type of vulnerability is CVE-2016-8220?
CVE-2016-8220 is an information disclosure vulnerability that exposes WAN replication credentials.
5
Is CVE-2016-8220 a critical vulnerability?
CVE-2016-8220 is not classified as critical but does pose a risk of credential exposure.