Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2016-4435

An endpoint of the Agent running on the BOSH Director VM with stemcell versions prior to 3232.6 and 3146.13 may allow unauthenticated clients to read or write blobs or cause a deni

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
dell

Description

An endpoint of the Agent running on the BOSH Director VM with stemcell versions prior to 3232.6 and 3146.13 may allow unauthenticated clients to read or write blobs or cause a denial of service attack on the Director VM. This vulnerability requires that the unauthenticated clients guess or find a URL matching an existing GUID.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Pivotal Cloud Foundry

  • BOSH stemcell versions prior to 3232.6 and 3146.13affected

References