CVE-2016-6639 : Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivota

Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.38 and 1.7.x before 1.7.19 and other products, place the .profile file in the htdocs directory, which might allow remote attackers to obtain sensitive information via an HTTP GET request for this file.

Published 2016-09-18 02:59:12

Updated 2021-09-09 17:16:17

Source Dell

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2016-6639

EPSS FAQ

0.36%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 69 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2016-6639

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

References for CVE-2016-6639

Products affected by CVE-2016-6639

Pivotal » Cloud Foundry Elastic Runtime
Versions up to, including, (<=) 1.6.37
cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*
Matching versions
Pivotal » Cloud Foundry Elastic Runtime » Version: 1.7.0
cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.0:*:*:*:*:*:*:*
Matching versions
Pivotal » Cloud Foundry Elastic Runtime » Version: 1.7.7
cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.7:*:*:*:*:*:*:*
Matching versions
Pivotal » Cloud Foundry Elastic Runtime » Version: 1.7.3
cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.3:*:*:*:*:*:*:*
Matching versions
Pivotal » Cloud Foundry Elastic Runtime » Version: 1.7.4
cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.4:*:*:*:*:*:*:*
Matching versions
Pivotal » Cloud Foundry Elastic Runtime » Version: 1.7.1
cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.1:*:*:*:*:*:*:*
Matching versions
Pivotal » Cloud Foundry Elastic Runtime » Version: 1.7.2
cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.2:*:*:*:*:*:*:*
Matching versions
Pivotal » Cloud Foundry Elastic Runtime » Version: 1.7.5
cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.5:*:*:*:*:*:*:*
Matching versions
Pivotal » Cloud Foundry Elastic Runtime » Version: 1.7.6
cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.6:*:*:*:*:*:*:*
Matching versions
Pivotal » Cloud Foundry Elastic Runtime » Version: 1.7.8
cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.8:*:*:*:*:*:*:*
Matching versions
Pivotal » Cloud Foundry Elastic Runtime » Version: 1.7.13
cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.13:*:*:*:*:*:*:*
Matching versions
Pivotal » Cloud Foundry Elastic Runtime » Version: 1.7.14
cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.14:*:*:*:*:*:*:*
Matching versions
Pivotal » Cloud Foundry Elastic Runtime » Version: 1.7.15
cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.15:*:*:*:*:*:*:*
Matching versions
Pivotal » Cloud Foundry Elastic Runtime » Version: 1.7.16
cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.16:*:*:*:*:*:*:*
Matching versions
Pivotal » Cloud Foundry Elastic Runtime » Version: 1.7.17
cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.17:*:*:*:*:*:*:*
Matching versions
Pivotal » Cloud Foundry Elastic Runtime » Version: 1.7.9
cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.9:*:*:*:*:*:*:*
Matching versions
Pivotal » Cloud Foundry Elastic Runtime » Version: 1.7.11
cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.11:*:*:*:*:*:*:*
Matching versions
Pivotal » Cloud Foundry Elastic Runtime » Version: 1.7.18
cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.18:*:*:*:*:*:*:*
Matching versions
Pivotal » Cloud Foundry Elastic Runtime » Version: 1.7.10
cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.10:*:*:*:*:*:*:*
Matching versions
Pivotal » Cloud Foundry Elastic Runtime » Version: 1.7.12
cpe:2.3:a:pivotal:cloud_foundry_elastic_runtime:1.7.12:*:*:*:*:*:*:*
Matching versions
Cloudfoundry » Php-buildpack
Versions up to, including, (<=) 4.3.17
cpe:2.3:a:cloudfoundry:php-buildpack:*:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2016-6639

Exploit prediction scoring system (EPSS) score for CVE-2016-6639

CVSS scores for CVE-2016-6639

CWE ids for CVE-2016-6639

References for CVE-2016-6639

Products affected by CVE-2016-6639