CVE-2016-2169: cloud foundry cloud controller DEPRECATED: Code
CVSS: 5.3v3.0MediumModified
Published 18-04-2018Last modified 16-09-2024
Vulnerability summary
CVE-2016-2169 is a medium (CVSS 5.3) DEPRECATED: Code vulnerability in cloud foundry cloud controller. EPSS estimates a 0.97% chance of exploitation in the next 30 days, higher than 61.2% of scored vulnerabilities.
CVSS score
5.3/10
010
Medium · v3.0 (NVD)EPSS score
0.97%
0%100%
Low · -0.02 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 18-04-2018PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
Cloud Foundry Cloud Controller, capi-release versions prior to 1.0.0 and cf-release versions prior to v237, contain a business logic flaw. An application developer may create an application with a route that conflicts with a platform service route and receive traffic intended for the service.
CVSS metrics
2 scores · 1 source · 2 versionsMedium 5.3Preferred score · NVD (NIST)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NSourcesSingle source
Medium 5.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:N/I:P/A:NSourcesSingle source
EPSS trend
Probability
0.97%
Chance of exploitation in the next 30 days
Percentile
61%
Versus all other CVEs
30-day change
-0.02 pp
From 0.99% on 19-09-2026
19-09-202619-10-2026
EPSS score0.97%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Cloudfoundry2 products
- capi-release< 1.0.0
- cf-release< 237
Cloud foundry1 product
- cloud controllercapi-release prior to 1.0.0, cf-release prior to v237
2 vendors · 3 products