VYPR
← All advisories
High severity7.4NVD Advisory· Published Sep 18, 2016· Updated Jun 17, 2026

CVE-2016-0928

CVE-2016-0928

Description

Multiple open redirect vulnerabilities in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.30 and 1.7.x before 1.7.8 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Affected products

11
  • Cloudfoundry/Elastic Runtimeinferred11 versions
    <1.6.30 or >=1.7.0,<1.7.8+ 10 more
    • (no CPE)range: <1.6.30 or >=1.7.0,<1.7.8
    • cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*range: <=1.6.29
    • cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.2:*:*:*:*:*:*:*
    • cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.3:*:*:*:*:*:*:*
    • cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.4:*:*:*:*:*:*:*
    • cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.5:*:*:*:*:*:*:*
    • cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.6:*:*:*:*:*:*:*
    • cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.7:*:*:*:*:*:*:*
    • (no CPE)range: <1.6.30, <1.7.8

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.