CVE-2016-0732

{"id": "CVE-2016-0732", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2017-09-07T13:29:00.293", "references": [{"url": "https://pivotal.io/security/cve-2016-0732", "tags": ["Mitigation", "Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "https://pivotal.io/security/cve-2016-0732", "tags": ["Mitigation", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-269"}]}], "descriptions": [{"lang": "en", "value": "The identity zones feature in Pivotal Cloud Foundry 208 through 229; UAA 2.0.0 through 2.7.3 and 3.0.0; UAA-Release 2 through 4, when configured with multiple identity zones; and Elastic Runtime 1.6.0 through 1.6.13 allows remote authenticated users with privileges in one zone to gain privileges and perform operations on a different zone via unspecified vectors."}, {"lang": "es", "value": "La caracter\u00edstica de zonas de identidad en Pivotal Cloud Foundry 208 a 229; UAA 2.0.0 a 2.7.3 y 3.0.0; UAA-Release 2 hasta la 4, cuando se configura con m\u00faltiples zonas de identidad; y Elastic Runtime 1.6.0 hasta la 1.6.13 permite que los usuarios remotos autenticados con privilegios en una zona obtengan privilegios y realicen operaciones en una zona diferente mediante vectores no especificados."}], "lastModified": "2024-11-21T02:42:16.330", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cloudfoundry:cf-release:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C6351C26-3E4F-4783-AC20-13076FDFD898", "versionEndIncluding": "229", "versionStartIncluding": "208"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8FAB232F-1FA4-4C5E-B302-68065DBA7510"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "44FEA25C-11C6-495C-84B6-EC8EDE0A5250"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D69110C2-044B-4EFE-B947-7E7FF382B110"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "62C001BE-9484-4AC9-9A03-890CD70A5DC4"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2B3E5A61-D13E-427F-AD00-F86ECD567318"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "49D09957-D01C-4914-A05F-B5F242DAD261"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "86766366-895E-4AEB-B5B0-E8181109EF39"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6C0EDADC-A658-4776-91C0-07DF44792356"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BDC9EBE9-D869-4CAF-B4AD-F5F36EA040D9"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "65E7C154-AB1D-4190-8C28-50355A6AC0B0"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.2.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4ABB4CA3-B087-480F-BF3F-AE3FAEC4241F"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0AF5FCE-D03F-4642-A266-F7F4F2577F8F"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.2.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2AF0C1DC-E17B-41F2-B537-FD8950371064"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.2.5.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "814FB6AA-4325-4AE6-9F92-01037EBE16EA"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.2.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BAACFFD2-AD71-4812-883A-7E27ECD79945"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2745C09B-1A58-47AA-99CF-7860CB3F9FED"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5AD6D54E-2336-4F94-B336-390123A3D2E3"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.3.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "75994E15-A991-4336-85FC-10CBAE5C69E3"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "73193F21-2BD0-4481-9EBF-458984F1FC23"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9CBD2130-EB88-4988-8995-CAC28710F3D6"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "04FCBE2B-A0DD-475C-94C6-01B365FA8705"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AAA1F712-56A8-4EEF-9220-7F047423611A"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "78D7CE72-75BD-477B-A75D-8E0F8DB7678D"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D6EC83A4-6CD0-4575-B504-0E4839DFF2A1"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BCBA7C49-82DC-42E6-BA32-624DCC91EE08"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F976310D-C749-4664-8AA4-548D23C39BCE"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52F58109-88F6-476D-B08A-801EC0A69BDA"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.7.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "484046E8-4048-4397-B391-AFB7EF38993C"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.7.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "905F3804-FAE0-4940-83D3-591A55A0B325"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.7.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EC27E1DD-648A-4FFC-8F4C-B3826329AC9D"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E5F50475-6C2B-4DEF-90B1-AEFACF6954F2"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.7.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7CEB468C-0748-4838-AD9E-ECF9B920B19A"}, {"criteria": "cpe:2.3:a:cloudfoundry:user_account_and_authentication:2.7.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "09DC2E28-7D43-4323-A522-7FFEACB5E88A"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cloudfoundry:uaa-release:2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8703E628-1ECE-4CA2-8003-DC902E920EE9"}, {"criteria": "cpe:2.3:a:cloudfoundry:uaa-release:3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "770AFCA5-A1FA-4CB6-98BF-A226D4DF429A"}, {"criteria": "cpe:2.3:a:cloudfoundry:uaa-release:4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F6047B3-346D-4809-B713-9513935D5783"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:pivotal:elastic_runtime:1.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D5416C8-AB64-4BC5-B1FE-5C08F7D5AF82"}, {"criteria": "cpe:2.3:a:pivotal:elastic_runtime:1.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "459E7CBD-AF09-43F8-B224-6BF8BB4D396E"}, {"criteria": "cpe:2.3:a:pivotal:elastic_runtime:1.6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E4BB9CD-3D23-4CC1-AEFA-19CADB24EFBF"}, {"criteria": "cpe:2.3:a:pivotal:elastic_runtime:1.6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD1D43E8-A4E8-4D5E-B482-B301BAC99846"}, {"criteria": "cpe:2.3:a:pivotal:elastic_runtime:1.6.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F5A0057F-FE6D-450B-83BF-00BB9D9DFCDB"}, {"criteria": "cpe:2.3:a:pivotal:elastic_runtime:1.6.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3A1763BC-6CD0-4AAE-BAA0-BE5F21EC7EDF"}, {"criteria": "cpe:2.3:a:pivotal:elastic_runtime:1.6.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3E18E06E-FF5F-431D-A613-99FE7130BCD8"}, {"criteria": "cpe:2.3:a:pivotal:elastic_runtime:1.6.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B04F41B2-E70D-4D5E-AB1E-2595A16AF3BE"}, {"criteria": "cpe:2.3:a:pivotal:elastic_runtime:1.6.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "38F08EF3-A4A2-423E-A4B8-486220716DB0"}, {"criteria": "cpe:2.3:a:pivotal:elastic_runtime:1.6.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "08D63E00-1DE1-4F76-A7E4-43BA0D643682"}, {"criteria": "cpe:2.3:a:pivotal:elastic_runtime:1.6.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6BEA097B-09DC-40A8-9353-A3BF45AF3A48"}, {"criteria": "cpe:2.3:a:pivotal:elastic_runtime:1.6.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3D149DEB-8FDB-42B3-A748-0A966D82DCA6"}, {"criteria": "cpe:2.3:a:pivotal:elastic_runtime:1.6.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77ECF4F7-BF73-46D8-AC12-300135C1FC38"}, {"criteria": "cpe:2.3:a:pivotal:elastic_runtime:1.6.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E827400C-F2C5-455E-8347-CD3628CACBCA"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}