CVE-2016-5016

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-5016
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-5016.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-5016
Aliases
Published
2017-04-24T19:59:00Z
Modified
2026-10-24T10:47:27Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

Pivotal Cloud Foundry 239 and earlier, UAA (aka User Account and Authentication Server) 3.4.1 and earlier, UAA release 12.2 and earlier, PCF (aka Pivotal Cloud Foundry) Elastic Runtime 1.6.x before 1.6.35, and PCF Elastic Runtime 1.7.x before 1.7.13 does not validate if a certificate is expired.

Database specific 
{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "1.6.0"
                        },
                        {
                            "fixed":  "1.6.35"
                        },
                        {
                            "introduced":  "1.6.0"
                        },
                        {
                            "fixed":  "1.6.35"
                        },
                        {
                            "introduced":  "1.7.0"
                        },
                        {
                            "fixed":  "1.7.13"
                        },
                        {
                            "introduced":  "1.7.0"
                        },
                        {
                            "fixed":  "1.7.13"
                        }
                    ],
                    "source":  "CPE_RANGE"
                }
            ],
            "vendor_product":  "pivotal_software:cloud_foundry_elastic_runtime"
        },
        {
            "cpes":  [
                "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:*:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "last_affected":  "3.4.1"
                        },
                        {
                            "last_affected":  "3.4.1"
                        }
                    ],
                    "source":  "CPE_RANGE"
                }
            ],
            "vendor_product":  "pivotal_software:cloud_foundry_uaa"
        }
    ]
}
References

Affected packages

Git
github.com/cloudfoundry-attic/cf-release

Affected ranges

Type
GIT
Repo
https://github.com/cloudfoundry-attic/cf-release
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
8da019e837edd07791b8d2ec20e7294a17e76f83
Fixed
1b88d9e499613e6f9b0728c39b8b4ffa486a0fb6
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:pivotal_software:cloud_foundry:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "last_affected":  "239"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "original_tag":  "v240",
            "range":  [
                {
                    "fixed":  "1b88d9e499613e6f9b0728c39b8b4ffa486a0fb6"
                }
            ],
            "source":  "REFERENCES_TAG"
        }
    ]
}

Affected versions

Other
-
list
log
scotty_09012012
v100
v102
v103
v104
v105
v109
v119
v132
v133
v134
v135
v136
v137
v140
v143
v156
v157
v161
v170
v183
v205
v239
v99
works-for-us
rc145.*
rc145.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-5016.json"
github.com/cloudfoundry/uaa

Affected ranges

Type
GIT
Repo
https://github.com/cloudfoundry/uaa
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
ddae2a131ab505ddf079a7db4289205098373244
Fixed
a54d147a0a0f2bad89b3cb768338acd3009cc815
Fixed
87e9f7b65eede068ad8cd392831317e10ef1e25e
Fixed
094f75188cc0606c5194cc64cf722c54ec8bfd2b
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "last_affected":  "3.4.1"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "original_tag":  "2.7.4.6",
            "range":  [
                {
                    "fixed":  "a54d147a0a0f2bad89b3cb768338acd3009cc815"
                }
            ],
            "source":  "REFERENCES_TAG"
        },
        {
            "original_tag":  "3.3.0.3",
            "range":  [
                {
                    "fixed":  "87e9f7b65eede068ad8cd392831317e10ef1e25e"
                }
            ],
            "source":  "REFERENCES_TAG"
        },
        {
            "original_tag":  "3.4.2",
            "range":  [
                {
                    "fixed":  "094f75188cc0606c5194cc64cf722c54ec8bfd2b"
                }
            ],
            "source":  "REFERENCES_TAG"
        }
    ]
}

Affected versions

1.*
1.0.1
1.0.3
1.1
1.1.1
1.1.2
1.10
1.11
1.2.0
1.2.6
1.4.0
1.4.1
1.4.2
1.4.3
1.4.5
1.4.6
1.4.7
1.5.0
1.5.2
1.5.2.1
1.5.3
1.5.4
1.5.4.1
1.6.0
1.6.1
1.6.2
1.6.4
1.6.5
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.8.3
1.9.0
1.9.1
2.*
2.0.0
2.0.1
2.0.2
2.0.3
2.1.0
2.2.4.1
2.2.5
2.2.6
2.3.0
2.3.1
2.3.1.1
2.4.0
2.4.1
2.5.0
2.5.1
2.5.2
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0.1
2.7.0.2
2.7.0.3
2.7.1
2.7.2
2.7.3
2.7.4
2.7.4.1
2.7.4.2
2.7.4.3
2.7.4.4
2.7.4.5
3.*
3.0.0
3.0.1
3.1.0
3.2.0
3.2.1
3.3.0
3.3.0.1
3.3.0.2
3.4.0
3.4.1
Other
lenient_hybrid_flow
travis-success-1475
travis-success-1478
travis-success-1497

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-5016.json"
github.com/cloudfoundry/uaa-release

Affected ranges

Type
GIT
Repo
https://github.com/cloudfoundry/uaa-release
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
38bc1da92d55f3947f5830f302664a5ceceaa9fe
Fixed
f6ca40e0700609cd71ec349d01c3330902222404
Fixed
b4b444b12a80357c4e64ba9e5c10ac998dc83c05
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:pivotal_software:cloud_foundry_uaa-release:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "last_affected":  "12.2"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "original_tag":  "v11.3",
            "range":  [
                {
                    "fixed":  "f6ca40e0700609cd71ec349d01c3330902222404"
                }
            ],
            "source":  "REFERENCES_TAG"
        },
        {
            "original_tag":  "v12.3",
            "range":  [
                {
                    "fixed":  "b4b444b12a80357c4e64ba9e5c10ac998dc83c05"
                }
            ],
            "source":  "REFERENCES_TAG"
        }
    ]
}

Affected versions

Other
v10
v11
v12
v2
v3
v6
v7
v8
v9
v11.*
v11.1
v11.2
v12.*
v12.1
v12.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-5016.json"