CVE-2016-8218

See a problem?
Source
https://nvd.nist.gov/vuln/detail/CVE-2016-8218
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-8218.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-8218
Published
2017-06-13T06:29:00Z
Modified
2024-09-03T01:28:13.417586Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validation logic in JSON Web Token (JWT) libraries can allow unprivileged attackers to impersonate other users to the routing API, aka an "Unauthenticated JWT signing algorithm in routing" issue.

References

Affected packages

Git / github.com/cloudfoundry/cf-release

Affected ranges

Type
GIT
Repo
https://github.com/cloudfoundry/cf-release
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
11a07541fc3cc296516efde4b303b9f67498d394
Last affected
15ead65649b3a1e8e1b8db7930c81d3c5875b582
Last affected
2121dc6405e0f036efa4dba963f7f49b07e76ffa
Last affected
2531223427ab48624a6251eb4011cb74d5a442d9
Last affected
2b8fcf9e7c45bdfdda3a7b2cef6e7739bce99439
Last affected
3c73e6d21d24061dcd56ba141e2fca5f50600eb7
Last affected
545c1f95dc1cce46cc6d2f2ccbe6510f2693ff7c
Last affected
55e40e21dfa39aa2726724e14c51c93c7df5542b
Last affected
5de34b6a1327e26dfc427989c4ae2c0c9302b719
Last affected
5fa14702bca4d36d1fdc7241c63d0b3e40dcbe90
Last affected
5fd76c798be025101915912171ab80f85516968f
Last affected
6003f780fffc7e2e4dcf9ba76dc20a7bde65583c
Last affected
6793254b0a2a5b861000c7fe9d001a3e7dbc0796
Last affected
758e3ce9f67c7c1995231c5fb11ab26201d6ac55
Last affected
7f7d1158e8f1cdc99d8c6292951d5dcb0e3ddbae
Last affected
92af12278feea4e52e92229e3c256543bf2af19f
Last affected
9334295133435fa77767651030500d2b0de62611
Last affected
9e31b98e104825c136d96a711bec2135f4a6ed33
Last affected
a7ead1d4e639153828a5add54ca16a0b45c9e22b
Last affected
afbe01cecc67fc4fe45a1a7cfc774fc2baa25d6c
Last affected
b30e0fd53e3b4cccc0f0f42b03cd556122c70fbd
Last affected
baa394224fc5780f641d86d97e833575ada2094b
Last affected
ce5a011be5cbc0f1d962e8910531542e773f117c
Last affected
e4eb9f4bb337f552fdc20df0220f662bcf5d62d9
Last affected
ebd045ff661302117b0c42e28d5770d1b742015f
Last affected
ee8d52f5dc2a525b6b376c1b4928eddbd9daa1f0
Last affected
f7e63b6fb9a2f897bcc7cb1d92edfb61df626c11
Last affected
fdc188e64859ea1cd91b237b7abf3ee929fc8252
Type
GIT
Repo
https://github.com/cloudfoundry/routing-release
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fc9d5f2e01145ceabc137490871f9951185ce749

Affected versions

Other

-
list
log
scotty_09012012
v
v100
v101
v102
v103
v104
v105
v106
v107
v108
v109
v110
v111
v112
v113
v114
v115
v116
v117
v118
v119
v119-fixed
v120
v121
v122
v123
v124
v125
v126
v127
v128
v129
v130
v131
v132
v133
v134
v135
v136
v137
v138
v139
v140
v141
v142
v143
v144
v145
v146
v147
v148
v149
v150
v151
v152
v153
v154
v155
v156
v157
v158
v159
v160
v161
v162
v163
v164
v165
v166
v168
v169
v170
v171
v172
v173
v175
v176
v177
v178
v179
v180
v182
v183
v186
v187
v188
v189
v190
v191
v192
v193
v194
v195
v196
v197
v198
v199
v200
v201
v202
v203
v204
v205
v206
v207
v208
v209
v210
v211
v212
v213
v214
v215
v217
v218
v219
v68
v69
v70
v71
v72
v73
v74
v75
v76
v77
v78
v79
v80
v81
v82
v83
v84
v85
v86
v87
v88
v89
v90
v91
v92
v93
v94
v95
v95-fixed
v96
v97
v98
v99
works-for-us

0.*

0.118.0
0.121.0
0.123.0
0.126.0
0.133.0
0.134.0
0.135.0
0.136.0
0.137.0
0.138.0
0.139.0
0.140.0
0.141.0
0.62.0
0.66.0
0.69.0
0.99.0

rc145.*

rc145.0