CVE-2016-6636 Open redirect in n/a

What is CVE-2016-6636?

CVE-2016-6636 is a medium-severity vulnerability in n/a, published on 30 Sep 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The OAuth authorization implementation in Pivotal Cloud Foundry (PCF) before 242; UAA 2.x before 2.7.4.7, 3.x before 3.3.0.5, and 3.4.x before 3.4.4; UAA BOSH before 11.5 and 12.x before 12.5; Elastic Runtime before 1.6.40, 1.7.x before 1.7.21, and 1.8.x before 1.8.1; and Ops Manager 1.7.x before 1.7.13 and 1.8.x before 1.8.1 mishandles redirect_uri subdomains, which allows remote attackers to obtain implicit access tokens via a modified subdomain.

Weakness: CWE-601

Which versions are affected by CVE-2016-6636?

It affects 5 products.

Products include Cloudfoundry Cloud Foundry Uaa Bosh, Pivotal Software Cloud Foundry, Pivotal Software Cloud Foundry Elastic Runtime, Pivotal Software Cloud Foundry Ops Manager, Pivotal Software Cloud Foundry Uaa.

How do I fix CVE-2016-6636?

No fix has been published for CVE-2016-6636 yet. Limit exposure of the affected software until one is available.

Is CVE-2016-6636 being exploited?

There is no known exploitation of CVE-2016-6636 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2016-6637 Cloud Foundry vulnerable to Cross-Site Request Forgery Critical 9.6
• CVE-2017-4973 Cloud Foundry UAA Privilege Escalation High 8.8
• CVE-2016-4468 SQL injection in n/a High 8.8
• CVE-2016-6651 Privilege escalation in n/a High 8.8
• CVE-2016-3084 Cloud Foundry UAA reset password vulnerable to brute force attack High 8.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-ffj6-5gww-48qc.