CVE-2016-0928

{"id": "CVE-2016-0928", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 7.4, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 4.0, "exploitabilityScore": 2.8}]}, "published": "2016-09-18T02:59:08.997", "references": [{"url": "http://www.securityfocus.com/bid/91550", "source": "security_alert@emc.com"}, {"url": "https://pivotal.io/security/cve-2016-0928", "tags": ["Vendor Advisory"], "source": "security_alert@emc.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-601"}]}], "descriptions": [{"lang": "en", "value": "Multiple open redirect vulnerabilities in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.30 and 1.7.x before 1.7.8 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de redirecci\u00f3n abierta en Pivotal Cloud Foundry (PCF) Elastic Runtime en versiones anteriores a 1.6.30 y 1.7.x en versiones anteriores a 1.7.8 permite a atacantes remotos redireccionar usuarios a sitios web arbitrarios y llevar a cabo ataques phishing a trav\u00e9s de vectores no especificados."}], "lastModified": "2016-11-28T19:56:08.753", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "85199F7E-AE24-415F-B2B6-9839367AF006", "versionEndIncluding": "1.6.29"}, {"criteria": "cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D459191E-DE3B-4F17-9F69-FFF3D000ADD5"}, {"criteria": "cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8943CF5B-DA24-4FF3-92B2-43EFE963B59E"}, {"criteria": "cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "45076F48-C883-4334-95EE-F00266D9EBA8"}, {"criteria": "cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "40D1DC46-1AD9-429F-A4D8-875D9B4B18BE"}, {"criteria": "cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B0ACEB5-8D35-426B-B911-E04ACFC09B09"}, {"criteria": "cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3C00AC47-7617-42AB-9403-A7494DDB94CF"}, {"criteria": "cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0A39E28-6AF2-42DA-BC0F-857D835D9BF4"}, {"criteria": "cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "12D89F4D-16EB-4F51-B64E-7E79DCC6E8CE"}], "operator": "OR"}]}], "sourceIdentifier": "security_alert@emc.com"}