CVE-2016-4435

CVE-2016-4435: vulnerability in Pivotal Cloud Foundry

Published · Updated

Follow this CVE+ Monitor Cloud Foundry

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.9%
An endpoint of the Agent running on the BOSH Director VM with stemcell versions prior to 3232.6 and 3146.13 may allow unauthenticated clients to read or write blobs or cause a denial of service attack on the Director VM. This vulnerability requires that the unauthenticated clients guess or find a URL matching an existing GUID.
Affected products
Pivotal · Cloud Foundry
Related CVEs — Pivotal Cloud Foundry

In the same product, most dangerous first.

CVE-2015-1834—CVE-2015-1834EPSS 1.7%CVE-2016-0761—CVE-2016-0761EPSS 1.6%CVE-2016-0780—CVE-2016-0780EPSS 1.2%CVE-2016-3084—CVE-2016-3084EPSS 1.2%CVE-2016-2165—CVE-2016-2165EPSS 0.9%CVE-2015-3189—CVE-2015-3189EPSS 0.8%