CVE-2016-8218

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-8218
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-8218.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-8218
Published
2017-06-13T06:29:00.237Z
Modified
2026-04-10T03:53:38.354281Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validation logic in JSON Web Token (JWT) libraries can allow unprivileged attackers to impersonate other users to the routing API, aka an "Unauthenticated JWT signing algorithm in routing" issue.

References

Affected packages

Git / github.com/cloudfoundry/cf-release

Affected ranges

Type
GIT
Repo
https://github.com/cloudfoundry/cf-release
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7f7d1158e8f1cdc99d8c6292951d5dcb0e3ddbae
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
15ead65649b3a1e8e1b8db7930c81d3c5875b582
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ee8d52f5dc2a525b6b376c1b4928eddbd9daa1f0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2531223427ab48624a6251eb4011cb74d5a442d9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
afbe01cecc67fc4fe45a1a7cfc774fc2baa25d6c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6003f780fffc7e2e4dcf9ba76dc20a7bde65583c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
92af12278feea4e52e92229e3c256543bf2af19f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9334295133435fa77767651030500d2b0de62611
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2121dc6405e0f036efa4dba963f7f49b07e76ffa
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b30e0fd53e3b4cccc0f0f42b03cd556122c70fbd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2b8fcf9e7c45bdfdda3a7b2cef6e7739bce99439
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
758e3ce9f67c7c1995231c5fb11ab26201d6ac55
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5fa14702bca4d36d1fdc7241c63d0b3e40dcbe90
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fdc188e64859ea1cd91b237b7abf3ee929fc8252
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5fd76c798be025101915912171ab80f85516968f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
11a07541fc3cc296516efde4b303b9f67498d394
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6793254b0a2a5b861000c7fe9d001a3e7dbc0796
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ce5a011be5cbc0f1d962e8910531542e773f117c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e4eb9f4bb337f552fdc20df0220f662bcf5d62d9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ebd045ff661302117b0c42e28d5770d1b742015f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
55e40e21dfa39aa2726724e14c51c93c7df5542b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
545c1f95dc1cce46cc6d2f2ccbe6510f2693ff7c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5de34b6a1327e26dfc427989c4ae2c0c9302b719
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
baa394224fc5780f641d86d97e833575ada2094b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a7ead1d4e639153828a5add54ca16a0b45c9e22b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3c73e6d21d24061dcd56ba141e2fca5f50600eb7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f7e63b6fb9a2f897bcc7cb1d92edfb61df626c11
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9e31b98e104825c136d96a711bec2135f4a6ed33
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "203"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "204"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "205"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "206"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "207"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "208"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "209"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "210"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "211"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "212"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "213"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "214"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "215"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "217"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "218"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "219"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "220"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "221"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "222"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "223"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "224"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "225"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "226"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "227"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "228"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "229"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "230"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "231"
        }
    ]
}
Type
GIT
Repo
https://github.com/cloudfoundry/routing-release
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fc9d5f2e01145ceabc137490871f9951185ce749
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.141.0"
        }
    ]
}

Affected versions

Other
-
list
log
scotty_09012012
v100
v102
v103
v104
v105
v109
v119
v132
v133
v134
v135
v136
v137
v140
v143
v156
v157
v161
v170
v183
v203
v204
v205
v206
v207
v208
v209
v210
v211
v212
v213
v214
v215
v217
v218
v219
v220
v221
v222
v223
v224
v225
v226
v227
v228
v229
v230
v231
v99
works-for-us
0.*
0.118.0
0.121.0
0.123.0
0.134.0
0.136.0
0.137.0
0.141.0
0.62.0
0.66.0
0.69.0
0.99.0
rc145.*
rc145.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-8218.json"