CyberSec.Space Logo
CVEブラウザに戻る

CVE-2016-4468

HIGH
8.8
CVSS Severity Score
EPSS Score0.1050%
EPSS Percentile13.02th
Published2017年4月11日
Last Modified2026年5月13日

Vulnerability Description

SQL injection vulnerability in Pivotal Cloud Foundry (PCF) before 238; UAA 2.x before 2.7.4.4, 3.x before 3.3.0.2, and 3.4.x before 3.4.1; UAA BOSH before 11.2 and 12.x before 12.2; Elastic Runtime before 1.6.29 and 1.7.x before 1.7.7; and Ops Manager 1.7.x before 1.7.8 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Affected Platforms (CPE)

📦
Cloudfoundry

Cloud Foundry Uaa Bosh

<= 12.0
📦
Pivotal Software

Cloud Foundry

<= 237.0
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.6.0
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.6.1
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.6.2
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.6.3
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.6.4
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.6.5
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.6.6
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.6.7
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.6.8
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.6.9
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.6.10
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.6.11
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.6.12
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.6.13
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.6.14
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.6.15
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.6.17
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.6.18
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.6.19
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.6.20
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.6.21
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.6.22
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.6.23
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.6.25
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.6.26
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.6.27
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.6.28
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.7.0
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.7.1
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.7.2
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.7.3
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.7.4
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.7.5
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.7.6
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.7.7
📦
Pivotal Software

Cloud Foundry Elastic Runtime

= 1.8.0
📦
Pivotal Software

Cloud Foundry Ops Manager

= 1.7.0
📦
Pivotal Software

Cloud Foundry Ops Manager

= 1.7.1
📦
Pivotal Software

Cloud Foundry Ops Manager

= 1.7.2
📦
Pivotal Software

Cloud Foundry Ops Manager

= 1.7.3
📦
Pivotal Software

Cloud Foundry Ops Manager

= 1.7.4
📦
Pivotal Software

Cloud Foundry Ops Manager

= 1.7.5
📦
Pivotal Software

Cloud Foundry Ops Manager

= 1.7.6
📦
Pivotal Software

Cloud Foundry Ops Manager

= 1.7.7
📦
Pivotal Software

Cloud Foundry Ops Manager

= 1.7.8
📦
Pivotal Software

Cloud Foundry Uaa

<= 3.4.0

References & Advisories

🔗 https://lists.cloudfoundry.org/archives/list/cf-dev%40lists.cloudfoundry.org/thread/WMTZBIH5U7DTOOX2SNRVTPQI3U2AINOB/
🔗 https://pivotal.io/security/cve-2016-4468
🔗 https://lists.cloudfoundry.org/archives/list/cf-dev%40lists.cloudfoundry.org/thread/WMTZBIH5U7DTOOX2SNRVTPQI3U2AINOB/
🔗 https://pivotal.io/security/cve-2016-4468

関連する脆弱性情報

CVE-2017-49929.8

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17...

CVE-2016-66379.6

Multiple cross-site request forgery (CSRF) vulnerabilities in Pivotal Cloud Foundry (PCF) before 242; UAA 2.x before 2.7.4.7, 3.x ...

CVE-2016-66518.8

The UAA /oauth/token endpoint in Pivotal Cloud Foundry (PCF) before 243; UAA 2.x before 2.7.4.8, 3.x before 3.3.0.6, and 3.4.x bef...

CVE-2017-49738.8

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14...