CVSS: 7.5EPSS: 0%CPEs: 13EXPL: 0CVE-2016-0896
https://notcve.org/view.php?id=CVE-2016-0896
Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.34 and 1.7.x before 1.7.12 places 169.254.0.0/16 in the all_open Application Security Group, which might allow remote attackers to bypass intended network-connectivity restrictions by leveraging access to the 169.254.169.254 address. Pivotal Cloud Foundry (PCF) Elastic Runtime en versiones anteriores a 1.6.34 y 1.7.x en versiones anteriores a 1.7.12 sitúa 169.254.0.0/16 en el all_open Application Security Group, lo que podría permitir a atacantes remotos eludir las restricciones de conectividad de red mediante el aprovechamiento del acceso a la dirección 169.254.169.254. • http://www.securityfocus.com/bid/92161 https://pivotal.io/security/cve-2016-0896 • CWE-254: 7PK - Security Features •
CVSS: 7.4EPSS: 0%CPEs: 9EXPL: 0CVE-2016-0928
https://notcve.org/view.php?id=CVE-2016-0928
Multiple open redirect vulnerabilities in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.30 and 1.7.x before 1.7.8 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Múltiples vulnerabilidades de redirección abierta en Pivotal Cloud Foundry (PCF) Elastic Runtime en versiones anteriores a 1.6.30 y 1.7.x en versiones anteriores a 1.7.8 permite a atacantes remotos redireccionar usuarios a sitios web arbitrarios y llevar a cabo ataques phishing a través de vectores no especificados. • http://www.securityfocus.com/bid/91550 https://pivotal.io/security/cve-2016-0928 • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') •