CVE-2016-9882

ALTO 7.5CVE-2016-9882 · Published 13/01/2017 · updated 17/06/2026

Em resumo

CVE-2016-9882 é uma vulnerabilidade ALTO (CVSS 7.5) que afeta capi-release (cloudfoundry), cf-release (cloudfoundry).
Chance de exploração nos próximos 30 dias (EPSS): 1.7%, maior que 77.0% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
capi-release cloudfoundry	`≤ 1.11.0`	No fix yet
cf-release cloudfoundry	`≤ 249`	No fix yet

Description

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v250 and CAPI-release versions prior to v1.12.0. Cloud Foundry logs the credentials returned from service brokers in Cloud Controller system component logs. These logs are written to disk and often sent to a log aggregator via syslog.

References

securityfocus.com/bid/95441 · Third Party Advisory
cloudfoundry.org/cve-2016-9882 · Mitigation

Mais vulnerabilidades de capi-release

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

capi-release

cloudfoundry

≤ 1.11.0

No fix yet

cf-release

cloudfoundry

≤ 249

No fix yet

Description

Mais vulnerabilidades de capi-release

Ver tudo →