VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jun 13, 2017· Updated Jun 17, 2026

CVE-2016-8218

CVE-2016-8218

Description

An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validation logic in JSON Web Token (JWT) libraries can allow unprivileged attackers to impersonate other users to the routing API, aka an "Unauthenticated JWT signing algorithm in routing" issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

31
  • Cloudfoundry/Cf Release29 versions
    cpe:2.3:a:cloudfoundry:cf-release:*:*:*:*:*:*:*:*+ 28 more
    • cpe:2.3:a:cloudfoundry:cf-release:*:*:*:*:*:*:*:*range: <=203
    • cpe:2.3:a:cloudfoundry:cf-release:204:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:205:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:206:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:207:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:208:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:209:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:210:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:211:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:212:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:213:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:214:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:215:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:217:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:218:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:219:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:220:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:221:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:222:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:223:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:224:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:225:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:226:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:227:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:228:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:229:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:230:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudfoundry:cf-release:231:*:*:*:*:*:*:*
    • (no CPE)range: 203 to 231
  • Cloudfoundry/Routing Release2 versions
    cpe:2.3:a:cloudfoundry:routing-release:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:cloudfoundry:routing-release:*:*:*:*:*:*:*:*range: <=0.141.0
    • (no CPE)range: <0.142.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.