Cloudfoundry Cf-release vulnerabilities

• cloud foundry foundry, cloudfoundry cloud foundry, java buildpack +1 more +3 more Applications deployed to Cloud Foundry, versions v166 through v227, may be vulnerable to a remote... CVE-2016-0708 5.9 MediumJuly 11, 2018
• cloud foundry controller, cloudfoundry capi-release, cf-release +1 more +3 more Cloud Foundry Cloud Controller, capi-release versions prior to 1.0.0 and cf-release versions... CVE-2016-2169 5.3 MediumApril 18, 2018
• cloudfoundry cf-release, pivotal software cloud foundry elastic runtime +1 more Applications in cf-release before 245 can be configured and pushed with a user-provided custom... CVE-2016-6658 9.6 CriticalMarch 29, 2018
• cloudfoundry cf-deployment, cf-release, dell emc cloud controller +1 more +3 more In Cloud Controller versions prior to 1.46.0, cf-deployment versions prior to 1.3.0, and cf... CVE-2018-1195 8.8 HighMarch 19, 2018
• cloudfoundry cf-release, pivotal uaa, uaa bosh +2 more Pivotal Cloud Foundry UAA XSS on UAA OpenID Connect check session iframe endpoint CVE-2018-1190 Fix available 6.1 MediumJanuary 4, 2018
• cloudfoundry capi-release, cf-deployment, cf-release +2 more An issue was discovered in Cloud Foundry Foundation capi-release (all versions prior to 1.45.0),... CVE-2017-14389 6.5 MediumNovember 28, 2017
• cloudfoundry cf-release, uaa-release +1 more Cloud Foundry UAA Denial of Service through client token revocation endpoint CVE-2017-8031 Fix available 5.3 MediumNovember 27, 2017
• cloudfoundry cf-release, pivotal software cloud foundry elastic runtime, cloud foundry uaa +2 more Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF)... CVE-2015-5173 8.8 HighOctober 24, 2017
• cloudfoundry cf-release, pivotal software cloud foundry elastic runtime, cloud foundry uaa +2 more Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password CVE-2015-5172 Fix available 9.8 CriticalOctober 24, 2017
• cloudfoundry cf-release, pivotal software cloud foundry elastic runtime, cloud foundry uaa +2 more Cloud Foundry Runtime Insufficient Session Expiration vulnerability CVE-2015-5171 Fix available 9.8 CriticalOctober 24, 2017
• cloudfoundry cf-release, pivotal software cloud foundry elastic runtime, cloud foundry uaa +2 more Cloud Foundry Runtime Cross-Site Request Forgery vulnerability CVE-2015-5170 Fix available 8.8 HighOctober 24, 2017
• cloudfoundry cf-release, pivotal capi-release +1 more In Cloud Foundry capi-release versions 1.33.0 and later, prior to 1.42.0 and cf-release versions... CVE-2017-8048 7.8 HighOctober 3, 2017
• cloudfoundry cf-release, pivotal routing-release +1 more In Cloud Foundry router routing-release all versions prior to v0.163.0 and cf-release all... CVE-2017-8047 6.1 MediumOctober 3, 2017
• cloudfoundry uaa-release, pivotal elastic runtime, cloudfoundry cf-release +1 more +3 more The identity zones feature in Pivotal Cloud Foundry 208 through 229; UAA 2.0.0 through 2.7.3 and... CVE-2016-0732 8.8 HighSeptember 7, 2017
• cloudfoundry cf-release Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to... CVE-2016-0713 4.7 MediumAugust 31, 2017
• cloudfoundry capi-release, cf-release, cloud foundry +2 more In Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.38.0 and cf... CVE-2017-8037 7.5 HighAugust 21, 2017
• cloudfoundry capi-release, cf-release, dell emc cloud controller +2 more An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release... CVE-2017-8035 7.5 HighJuly 25, 2017
• cloudfoundry capi-release, cf-release +1 more An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release... CVE-2017-8033 7.8 HighJuly 25, 2017
• cloudfoundry capi-release, cf-release, cloud foundry +1 more +3 more The Cloud Controller and Router in Cloud Foundry (CAPI-release capi versions prior to v1.32.0,... CVE-2017-8034 6.6 MediumJuly 17, 2017
• cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry uaa +1 more +3 more Cloud Foundry UAA privilege escalation with user invitations CVE-2017-4992 Fix available 9.8 CriticalJune 13, 2017
• cloud foundry uaa, cloudfoundry cf-release, pivotal software cloud foundry uaa +1 more +3 more Cloud Foundry UAA password reset vulnerability CVE-2017-4991 Fix available 7.2 HighJune 13, 2017
• cloud foundry uaa, cloudfoundry cf-release, pivotal software cloud foundry uaa +1 more +3 more Blind SQL Injection with privileged Cloud Foundry UAA endpoints CVE-2017-4974 Fix available 6.5 MediumJune 13, 2017
• cloud foundry uaa, cloudfoundry cf-release, cloud foundry uaa bosh +1 more +3 more An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA... CVE-2017-4972 7.5 HighJune 13, 2017
• cloudfoundry cf-release, cloud foundry, staticfile buildpack +2 more An issue was discovered in Cloud Foundry Foundation cf-release v255 and Staticfile buildpack... CVE-2017-4970 5.9 MediumJune 13, 2017
• cloudfoundry capi-release, cf-release, cloud foundry +2 more An issue was discovered in Cloud Foundry Foundation cf-release versions prior to 250 and CAPI... CVE-2016-8219 6.5 MediumJune 13, 2017
• cloudfoundry cf-release, cloud foundry, routing-release +2 more An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and... CVE-2016-8218 9.8 CriticalJune 13, 2017
• cloudfoundry cf-mysql-release, cloud foundry, cf-release +2 more An issue was discovered in Cloud Foundry Foundation Cloud Foundry release versions prior to v245... CVE-2016-6655 9.8 CriticalJune 13, 2017
• cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +2 more The Loggregator Traffic Controller endpoints in cf-release v231 and lower, Pivotal Elastic... CVE-2016-2165 6.5 MediumMay 25, 2017
• cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +2 more It was discovered that cf-release v231 and lower, Pivotal Cloud Foundry Elastic Runtime 1.5.x... CVE-2016-0780 7.5 HighMay 25, 2017
• cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +1 more +3 more With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or... CVE-2015-3191 8.8 HighMay 25, 2017
• cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +1 more +3 more With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or... CVE-2015-3190 6.1 MediumMay 25, 2017
• cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +1 more +3 more Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password CVE-2015-3189 Fix available 3.7 LowMay 25, 2017
• cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +2 more A path traversal vulnerability was identified in the Cloud Foundry component Cloud Controller... CVE-2015-1834 6.5 MediumMay 25, 2017
• cloudfoundry cf-release The Cloud Controller in Cloud Foundry cf-release versions prior to v255 allows authenticated... CVE-2017-4969 6.5 MediumApril 20, 2017
• cloudfoundry capi-release, cf-release +1 more An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v250 and CAPI... CVE-2016-9882 7.5 HighJanuary 13, 2017