9.8
CVE-2016-9880
- EPSS 3.72%
- Published 16.03.2018 20:29:00
- Last modified 21.11.2024 03:01:56
- Source security_alert@emc.com
- Teams watchlist Login
- Open Login
The GemFire broker for Cloud Foundry 1.6.x before 1.6.5 and 1.7.x before 1.7.1 has multiple API endpoints which do not require authentication and could be used to gain access to the cluster managed by the broker.
Data is provided by the National Vulnerability Database (NVD)
Pivotal Software ≫ Gemfire For Pivotal Cloud Foundry Version >= 1.6.0 < 1.6.5
Pivotal Software ≫ Gemfire For Pivotal Cloud Foundry Version1.7.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.72% | 0.875 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.