Critical severity9.8NVD Advisory· Published Sep 18, 2016· Updated May 6, 2026
CVE-2016-0883
CVE-2016-0883
Description
Pivotal Cloud Foundry (PCF) Ops Manager before 1.5.14 and 1.6.x before 1.6.9 uses the same cookie-encryption key across different customers' installations, which allows remote attackers to bypass session authentication by leveraging knowledge of this key from another installation.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- pivotal.io/security/pcf-ops-manager-weak-authentication-schemenvdVendor Advisory
News mentions
0No linked articles in our index yet.