What’s Vulnerable › Vulnerabilities

CVE-2016-0732

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-09-07 · updated 2026-06-17
• Weakness: CWE-269

Description

The identity zones feature in Pivotal Cloud Foundry 208 through 229; UAA 2.0.0 through 2.7.3 and 3.0.0; UAA-Release 2 through 4, when configured with multiple identity zones; and Elastic Runtime 1.6.0 through 1.6.13 allows remote authenticated users with privileges in one zone to gain privileges and perform operations on a different zone via unspecified vectors.

Affected products

• Cloud Foundry Cloud Controller cf-release versions prior to v255: from 208 through 229
• Cloudfoundry Uaa-Release: 2, 3, 4
• Cloudfoundry User Account And Authentication: 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.1.0, 2.2.0 (+27)
• Pivotal Elastic Runtime: 1.6.0, 1.6.1, 1.6.2, 1.6.3, 1.6.4, 1.6.5 (+8)

References

• https://pivotal.io/security/cve-2016-0732
• https://pivotal.io/security/cve-2016-0732

Get alerted when CVE-2016-0732 or the next vulnerability affects your stack