high8.8
CVE-2016-0732
The identity zones feature in Pivotal Cloud Foundry 208 through 229; UAA 2.0.0 through 2.7.3 and 3.0.0; UAA-Release 2 through 4, when configured with multiple …
Impact
The identity zones feature in Pivotal Cloud Foundry 208 through 229; UAA 2.0.0 through 2.7.3 and 3.0.0; UAA-Release 2 through 4, when configured with multiple identity zones; and Elastic Runtime 1.6.0 through 1.6.13 allows remote authenticated users with privileges in one zone to gain privileges and perform operations on a different zone via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cloudfoundry | Cf-Release | from 208 through 229 |
| Cloudfoundry | User Account And Authentication | Versions 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.1.0, 2.2.0 |
| Cloudfoundry | Uaa-Release | Versions 2, 3, 4 |
| Pivotal | Elastic Runtime | Versions 1.6.0, 1.6.1, 1.6.2, 1.6.3, 1.6.4, 1.6.5 |