CVE-2016-9880
First published: Thu Feb 09 2017(Updated: )
The GemFire broker for Cloud Foundry 1.6.x before 1.6.5 and 1.7.x before 1.7.1 has multiple API endpoints which do not require authentication and could be used to gain access to the cluster managed by the broker.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Pivotal Software Gemfire For Pivotal Cloud Foundry | >=1.6.0<1.6.5 | |
| Pivotal Software Gemfire For Pivotal Cloud Foundry | =1.7.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/tags
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/pivotal software
- canonical/pivotal software gemfire for pivotal cloud foundry
- version/pivotal software gemfire for pivotal cloud foundry/1.6.0
- version/pivotal software gemfire for pivotal cloud foundry/1.7.0