Description
Multiple open redirect vulnerabilities in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.30 and 1.7.x before 1.7.8 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
https://pivotal.io/security/cve-2016-0928
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/91550
Scores
CVSS v3
7.4
EPSS
0.0138
EPSS Percentile
68.6%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Details
CWE
CWE-601
Status
published
Products (9)
pivotal/cloud_foundry_elastic_runtime
1.7.0
pivotal/cloud_foundry_elastic_runtime
1.7.1
pivotal/cloud_foundry_elastic_runtime
1.7.2
pivotal/cloud_foundry_elastic_runtime
1.7.3
pivotal/cloud_foundry_elastic_runtime
1.7.4
pivotal/cloud_foundry_elastic_runtime
1.7.5
pivotal/cloud_foundry_elastic_runtime
1.7.6
pivotal/cloud_foundry_elastic_runtime
1.7.7
pivotal/cloud_foundry_elastic_runtime
< 1.6.29
Published
Sep 18, 2016
Tracked Since
Feb 18, 2026