CVE-2016-5016 | BDVDB-2026-84568 Detail
Description#
Pivotal Cloud Foundry 239 and earlier, UAA (aka User Account and Authentication Server) 3.4.1 and earlier, UAA release 12.2 and earlier, PCF (aka Pivotal Cloud Foundry) Elastic Runtime 1.6.x before 1.6.35, and PCF Elastic Runtime 1.7.x before 1.7.13 does not validate if a certificate is expired.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- https://github.com/cloudfoundry/uaa/releases/tag/2.7.4.6
- https://github.com/cloudfoundry/uaa/releases/tag/3.3.0.3
- https://github.com/cloudfoundry/uaa-release/releases/tag/v12.3
- https://github.com/cloudfoundry/uaa/releases/tag/3.4.2
- https://github.com/cloudfoundry/cf-release/releases/tag/v240
- https://pivotal.io/security/cve-2016-5016
- https://github.com/cloudfoundry/uaa-release/releases/tag/v11.3
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.