What is CVE-2016-6651?

CVE-2016-6651 is a high-severity vulnerability in Cloudfoundry Cloud_foundry_uaa_bosh, classified under CWE-264. CVSS score: 8.8/10. Published 2016-09-30.

How severe is CVE-2016-6651?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Cloudfoundry Cloud_foundry_uaa_bosh

CVE-2016-6651

The UAA /oauth/token endpoint in Pivotal Cloud Foundry (PCF) before 243; UAA 2.x before 2.7.4.8, 3.x before 3.3.0.6, and 3.4.x before 3.4.5; UAA BOSH before 11.7 and 12.x before 12.6; Elastic Runtime before 1.6.40, 1.7.x before 1.7.21, and…

EPSS: 0.007 (71.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Cloudfoundry Cloud_foundry_uaa_bosh
Pivotal_software Cloud_foundry
Pivotal_software Cloud_foundry_elastic_runtime — versions 1.6.0, 1.6.1, 1.6.2
Pivotal_software Cloud_foundry_ops_manager — versions 1.7.0, 1.7.1, 1.7.2
Pivotal_software Cloud_foundry_uaa
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

93241 (vdb-entry, x_refsource_BID)
security_alert@emc.com (x_refsource_CONFIRM, Mitigation, Vendor Advisory)

Frequently asked questions

What is CVE-2016-6651?: CVE-2016-6651 is a high-severity vulnerability in Cloudfoundry Cloud_foundry_uaa_bosh, classified under CWE-264. CVSS score: 8.8/10. Published 2016-09-30.
How severe is CVE-2016-6651?: High severity. CVSS v3 base score is 8.8 out of 10.