CVE-2016-4468

Published on: 04/11/2017 12:00:00 AM UTC

Last Modified on: 03/23/2021 11:26:58 PM UTC

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Certain versions of Cloud Foundry from Pivotal Software contain the following vulnerability:

SQL injection vulnerability in Pivotal Cloud Foundry (PCF) before 238; UAA 2.x before 2.7.4.4, 3.x before 3.3.0.2, and 3.4.x before 3.4.1; UAA BOSH before 11.2 and 12.x before 12.2; Elastic Runtime before 1.6.29 and 1.7.x before 1.7.7; and Ops Manager 1.7.x before 1.7.8 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2016-4468 has been assigned by [email protected] to track the vulnerability - currently rated as HIGH severity.

CVSS3 Score: 8.8 - HIGH

Attack
Vector
Attack
Complexity
Privileges
Required
User
Interaction
NETWORK LOW LOW NONE
Scope Confidentiality
Impact
Integrity
Impact
Availability
Impact
UNCHANGED HIGH HIGH HIGH

CVSS2 Score: 6.5 - MEDIUM

Access
Vector
Access
Complexity
Authentication
NETWORK LOW SINGLE
Confidentiality
Impact
Integrity
Impact
Availability
Impact
PARTIAL PARTIAL PARTIAL

CVE References

Description Tags Link
[email protected] | Home Patch
Vendor Advisory
web.archive.org
text/html
Inactive LinkNot Archived
URL Logo MLIST [cf-dev] 20160630 CVE-2016-4468 UAA SQL Injection
CVE-2016-4468 UAA SQL Injection | Security | Pivotal Mitigation
Patch
Vendor Advisory
pivotal.io
text/html
URL Logo CONFIRM pivotal.io/security/cve-2016-4468

Exploit/POC from Github

CVE-2016-4468

Known Affected Configurations (CPE V2.3)

Type Vendor Product Version Update Edition Language
ApplicationPivotal SoftwareCloud FoundryAllAllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.0AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.1AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.10AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.11AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.12AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.13AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.14AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.15AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.17AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.18AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.19AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.2AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.20AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.21AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.22AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.23AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.25AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.26AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.27AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.28AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.3AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.4AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.5AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.6AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.7AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.8AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.9AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.7.0AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.7.1AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.7.2AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.7.3AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.7.4AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.7.5AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.7.6AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.7.7AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.8.0AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.0AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.1AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.10AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.11AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.12AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.13AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.14AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.15AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.17AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.18AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.19AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.2AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.20AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.21AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.22AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.23AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.25AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.26AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.27AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.28AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.3AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.4AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.5AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.6AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.7AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.8AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.6.9AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.7.0AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.7.1AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.7.2AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.7.3AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.7.4AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.7.5AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.7.6AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.7.7AllAllAll
ApplicationPivotal SoftwareCloud Foundry Elastic Runtime1.8.0AllAllAll
ApplicationPivotal SoftwareCloud Foundry Ops Manager1.7.0AllAllAll
ApplicationPivotal SoftwareCloud Foundry Ops Manager1.7.1AllAllAll
ApplicationPivotal SoftwareCloud Foundry Ops Manager1.7.2AllAllAll
ApplicationPivotal SoftwareCloud Foundry Ops Manager1.7.3AllAllAll
ApplicationPivotal SoftwareCloud Foundry Ops Manager1.7.4AllAllAll
ApplicationPivotal SoftwareCloud Foundry Ops Manager1.7.5AllAllAll
ApplicationPivotal SoftwareCloud Foundry Ops Manager1.7.6AllAllAll
ApplicationPivotal SoftwareCloud Foundry Ops Manager1.7.7AllAllAll
ApplicationPivotal SoftwareCloud Foundry Ops Manager1.7.8AllAllAll
ApplicationPivotal SoftwareCloud Foundry Ops Manager1.7.0AllAllAll
ApplicationPivotal SoftwareCloud Foundry Ops Manager1.7.1AllAllAll
ApplicationPivotal SoftwareCloud Foundry Ops Manager1.7.2AllAllAll
ApplicationPivotal SoftwareCloud Foundry Ops Manager1.7.3AllAllAll
ApplicationPivotal SoftwareCloud Foundry Ops Manager1.7.4AllAllAll
ApplicationPivotal SoftwareCloud Foundry Ops Manager1.7.5AllAllAll
ApplicationPivotal SoftwareCloud Foundry Ops Manager1.7.6AllAllAll
ApplicationPivotal SoftwareCloud Foundry Ops Manager1.7.7AllAllAll
ApplicationPivotal SoftwareCloud Foundry Ops Manager1.7.8AllAllAll
ApplicationPivotal SoftwareCloud Foundry UaaAllAllAllAll
ApplicationPivotal SoftwareCloud Foundry Uaa BoshAllAllAllAll
  • cpe:2.3:a:pivotal_software:cloud_foundry:*:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.0:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.1:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.10:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.11:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.12:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.13:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.14:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.15:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.17:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.18:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.19:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.2:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.20:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.21:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.22:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.23:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.25:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.26:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.27:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.28:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.3:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.4:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.5:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.6:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.7:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.8:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.9:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.0:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.1:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.2:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.3:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.4:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.5:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.6:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.7:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.0:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.0:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.1:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.10:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.11:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.12:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.13:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.14:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.15:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.17:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.18:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.19:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.2:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.20:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.21:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.22:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.23:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.25:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.26:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.27:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.28:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.3:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.4:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.5:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.6:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.7:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.8:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.9:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.0:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.1:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.2:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.3:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.4:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.5:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.6:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.7:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.0:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.0:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.1:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.2:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.3:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.4:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.5:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.6:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.7:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.8:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.0:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.1:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.2:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.3:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.4:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.5:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.6:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.7:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.8:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa:*:*:*:*:*:*:*:*:
  • cpe:2.3:a:pivotal_software:cloud_foundry_uaa_bosh:*:*:*:*:*:*:*:*: