VYPR
Get started
← All advisories
Critical severity9.8NVD Advisory· Published Jun 13, 2017· Updated May 13, 2026

CVE-2016-8218

CVE-2016-8218

Description

An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validation logic in JSON Web Token (JWT) libraries can allow unprivileged attackers to impersonate other users to the routing API, aka an "Unauthenticated JWT signing algorithm in routing" issue.

Affected products

29
  • Cloudfoundry/Cf Release28 versions
    cpe:2.3:a:cloudfoundry:cf-release:*:*:*:*:*:*:*:*+ 27 more
    • cpe:2.3:a:cloudfoundry:cf-release:*:*:*:*:*:*:*:*range: <=203
    • cpe:2.3:a:cloudfoundry:cf-release:204:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:205:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:206:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:207:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:208:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:209:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:210:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:211:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:212:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:213:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:214:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:215:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:217:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:218:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:219:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:220:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:221:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:222:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:223:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:224:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:225:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:226:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:227:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:228:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:229:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:230:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:231:*:*:*:*:*:*:*
  • Cloudfoundry/Routing Release
    cpe:2.3:a:cloudfoundry:routing-release:*:*:*:*:*:*:*:*
    Range: <=0.141.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.