CVEvulnerability
CVE-2016-5016
5.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-04-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.9 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-295
Description
Pivotal Cloud Foundry 239 and earlier, UAA (aka User Account and Authentication Server) 3.4.1 and earlier, UAA release 12.2 and earlier, PCF (aka Pivotal Cloud Foundry) Elastic Runtime 1.6.x before 1.6.35, and PCF Elastic Runtime 1.7.x before 1.7.13 does not validate if a certificate is expired.
Affected configurations
• pivotal software cloud foundry (<= 239)
• pivotal software cloud foundry elastic runtime (>= 1.6.0 < 1.6.35)
• pivotal software cloud foundry elastic runtime (>= 1.7.0 < 1.7.13)
• pivotal software cloud foundry uaa (<= 3.4.1)
• pivotal software cloud foundry uaa-release (<= 12.2)
Related
Weakness · CWE (1)
- CWE-295 Improper Certificate Validation weakness
References
- https://github.com/cloudfoundry/cf-release/releases/tag/v240 Release Notes, Third Party Advisory
- https://github.com/cloudfoundry/uaa-release/releases/tag/v11.3 Release Notes, Third Party Advisory
- https://github.com/cloudfoundry/uaa-release/releases/tag/v12.3 Release Notes, Third Party Advisory
- https://github.com/cloudfoundry/uaa/releases/tag/2.7.4.6 Release Notes, Third Party Advisory
- https://github.com/cloudfoundry/uaa/releases/tag/3.3.0.3 Release Notes, Third Party Advisory
- https://github.com/cloudfoundry/uaa/releases/tag/3.4.2 Release Notes, Third Party Advisory
- https://pivotal.io/security/cve-2016-5016 Vendor Advisory
- https://github.com/cloudfoundry/cf-release/releases/tag/v240 Release Notes, Third Party Advisory
- https://github.com/cloudfoundry/uaa-release/releases/tag/v11.3 Release Notes, Third Party Advisory
- https://github.com/cloudfoundry/uaa-release/releases/tag/v12.3 Release Notes, Third Party Advisory
- https://github.com/cloudfoundry/uaa/releases/tag/2.7.4.6 Release Notes, Third Party Advisory
- https://github.com/cloudfoundry/uaa/releases/tag/3.3.0.3 Release Notes, Third Party Advisory
- https://github.com/cloudfoundry/uaa/releases/tag/3.4.2 Release Notes, Third Party Advisory
- https://pivotal.io/security/cve-2016-5016 Vendor Advisory