Cloud Foundry cf-release 231
Approved changes feed: RSS · Atom
cpe:2.3:a:cloudfoundry:cf-release:231:*:*:*:*:*:*:*
part: a version: 231 update: *
| Vendor | Cloudfoundry (3aa6768c-437d-5100-a420-b037598cadb4) |
|---|---|
| Product | Cf Release (fccec3fb-23bc-522a-a656-bc8c73395528) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/cloudfoundry-attic/cf-release |
purl2cpe | 2026-06-01 10:12:05.109325 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-8218 |
vulnerable | 2026-06-03 14:36:08.994242 |
Details available
An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validation logic in JSON Web Token (JWT) libraries can allow unprivileged attackers to impersonate other users to the routing API, aka an "Unauthenticated JWT signing algorithm in routing" issue.
Published: 2017-06-13T06:00:00.000Z
Updated: 2024-08-06T02:13:21.828Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-0780 |
vulnerable | 2026-06-03 14:35:22.266526 |
Details available
It was discovered that cf-release v231 and lower, Pivotal Cloud Foundry Elastic Runtime 1.5.x versions prior to 1.5.17 and Pivotal Cloud Foundry Elastic Runtime 1.6.x versions prior to 1.6.18 do not properly enforce disk quotas in certain cases. An attacker could use an improper disk quota value to bypass enforcement and consume all the disk on DEAs/CELLs causing a potential denial of service for other applications.
Published: 2017-05-25T17:00:00.000Z
Updated: 2024-08-05T22:30:04.090Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.