CVE-2016-5016
Severity CVSS v4.0:
Pending analysis
Type:
CWE-295
Improper Certificate Validation
Publication date:
24/04/2017
Last modified:
20/04/2025
Description
Pivotal Cloud Foundry 239 and earlier, UAA (aka User Account and Authentication Server) 3.4.1 and earlier, UAA release 12.2 and earlier, PCF (aka Pivotal Cloud Foundry) Elastic Runtime 1.6.x before 1.6.35, and PCF Elastic Runtime 1.7.x before 1.7.13 does not validate if a certificate is expired.
Impact
Base Score 3.x
5.90
Severity 3.x
MEDIUM
Base Score 2.0
4.30
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:pivotal_software:cloud_foundry:*:*:*:*:*:*:*:* | 239 (including) | |
cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:* | 1.6.0 (including) | 1.6.35 (excluding) |
cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:* | 1.7.0 (including) | 1.7.13 (excluding) |
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:*:*:*:*:*:*:*:* | 3.4.1 (including) | |
cpe:2.3:a:pivotal_software:cloud_foundry_uaa-release:*:*:*:*:*:*:*:* | 12.2 (including) |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- https://github.com/cloudfoundry/cf-release/releases/tag/v240
- https://github.com/cloudfoundry/uaa-release/releases/tag/v11.3
- https://github.com/cloudfoundry/uaa-release/releases/tag/v12.3
- https://github.com/cloudfoundry/uaa/releases/tag/2.7.4.6
- https://github.com/cloudfoundry/uaa/releases/tag/3.3.0.3
- https://github.com/cloudfoundry/uaa/releases/tag/3.4.2
- https://pivotal.io/security/cve-2016-5016
- https://github.com/cloudfoundry/cf-release/releases/tag/v240
- https://github.com/cloudfoundry/uaa-release/releases/tag/v11.3
- https://github.com/cloudfoundry/uaa-release/releases/tag/v12.3
- https://github.com/cloudfoundry/uaa/releases/tag/2.7.4.6
- https://github.com/cloudfoundry/uaa/releases/tag/3.3.0.3
- https://github.com/cloudfoundry/uaa/releases/tag/3.4.2
- https://pivotal.io/security/cve-2016-5016