9.8
CVE-2016-9880
- EPSS 3.72%
- Veröffentlicht 16.03.2018 20:29:00
- Zuletzt bearbeitet 21.11.2024 03:01:56
- Quelle security_alert@emc.com
- Teams Watchlist Login
- Unerledigt Login
The GemFire broker for Cloud Foundry 1.6.x before 1.6.5 and 1.7.x before 1.7.1 has multiple API endpoints which do not require authentication and could be used to gain access to the cluster managed by the broker.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Pivotal Software ≫ Gemfire For Pivotal Cloud Foundry Version >= 1.6.0 < 1.6.5
Pivotal Software ≫ Gemfire For Pivotal Cloud Foundry Version1.7.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.72% | 0.875 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.