Pivotal Cloud Foundry (PCF) Elastic Runtime prior to 1.6.34 and 1.7.x prior to 1.7.12 places 169.254.0.0/16 in the all_open Application Security Group, which might allow remote malicious users to bypass intended network-connectivity restrictions by leveraging access to the 169.254.169.254 address.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
pivotal software cloud foundry elastic runtime 1.7.6 |
||
pivotal software cloud foundry elastic runtime 1.7.4 |
||
pivotal software cloud foundry elastic runtime 1.7.5 |
||
pivotal software cloud foundry elastic runtime 1.7.7 |
||
pivotal software cloud foundry elastic runtime 1.7.0 |
||
pivotal software cloud foundry elastic runtime 1.7.1 |
||
pivotal software cloud foundry elastic runtime 1.7.8 |
||
pivotal software cloud foundry elastic runtime 1.7.9 |
||
pivotal software cloud foundry elastic runtime 1.7.10 |
||
pivotal software cloud foundry elastic runtime 1.7.2 |
||
pivotal software cloud foundry elastic runtime 1.7.3 |
||
pivotal software cloud foundry elastic runtime 1.7.11 |
||
pivotal software cloud foundry elastic runtime |
Vulmon