Cloud Foundry Logo
blog single gear
Blog
Security Advisory

CVE-2016-8219: Space Auditor can restage apps

by: December 22, 2016

CVE-2016-8219: Space Auditor can restage apps

Severity

Medium

Vendor

Cloud Foundry Foundation

Versions Affected

  • cf-release versions prior to 250
  • CAPI-release versions prior to 1.12.0

Description

A user with the SpaceAuditor role is over-privileged with the ability to restage applications. This could cause application downtime if the restage fails.

Mitigation

Users of affected versions should apply the following mitigation:

  • Upgrade to cf-release version 250 or later
  • Upgrade to CAPI-release version 1.12.0 or later
Cloud Foundry Foundation Security Team Profile Image

Cloud Foundry Foundation Security Team, AUTHOR

SEE ALL ARTICLES

You Might Also Like

CVE-2018-1231: BOSH CLI does not restrict access to configuration file
Security Advisory

CVE-2018-1231: BOSH CLI does not restrict access to configuration file

by Cloud Foundry Foundation Security Team March 26, 2018
USN-5123-1: MySQL vulnerabilities
Security Advisory

USN-5123-1: MySQL vulnerabilities

by Cloud Foundry Foundation Security Team October 28, 2021
USN-6566-1: SQLite vulnerabilities
Security Advisory

USN-6566-1: SQLite vulnerabilities

by Cloud Foundry Foundation Security Team February 29, 2024
This website uses cookies to offer you a better browsing experience. Find out more about how we use cookies and how you can change your settings. Accept