Cloud Foundry cf-release 229
Approved changes feed: RSS · Atom
cpe:2.3:a:cloudfoundry:cf-release:229:*:*:*:*:*:*:*
part: a version: 229 update: *
| Vendor | Cloudfoundry (3aa6768c-437d-5100-a420-b037598cadb4) |
|---|---|
| Product | Cf Release (fccec3fb-23bc-522a-a656-bc8c73395528) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/cloudfoundry-attic/cf-release |
purl2cpe | 2026-06-01 10:12:05.109321 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-8218 |
vulnerable | 2026-06-03 14:36:08.993224 |
Details available
An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validation logic in JSON Web Token (JWT) libraries can allow unprivileged attackers to impersonate other users to the routing API, aka an "Unauthenticated JWT signing algorithm in routing" issue.
Published: 2017-06-13T06:00:00.000Z
Updated: 2024-08-06T02:13:21.828Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.