CVE-2016-9880

CRITICAL 9.8CVE-2016-9880 · Published 16/03/2018 · updated 17/06/2026

In short

CVE-2016-9880 is a CRITICAL (CVSS 9.8) vulnerability affecting gemfire for pivotal cloud foundry (pivotal software).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 81.2% of all vulnerabilities.
Fix: update to 1.6.5 or later.

Package	Affected versions	Patched versions
gemfire for pivotal cloud foundry pivotal_software	`= 1.7.0≥ 1.6.0, < 1.6.5`	`1.6.5`

Description

The GemFire broker for Cloud Foundry 1.6.x before 1.6.5 and 1.7.x before 1.7.1 has multiple API endpoints which do not require authentication and could be used to gain access to the cluster managed by the broker.

References

securityfocus.com/bid/96146 · Third Party Advisory
pivotal.io/security/cve-2016-9880 · Vendor Advisory

More vulnerabilities in gemfire for pivotal cloud foundry

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free