CVE-2016-2169: Cloudfoundry Capi-Release

Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days.

Cloud Foundry Cloud Controller, capi-release versions prior to 1.0.0 and cf-release versions prior to v237, contain a business logic flaw. An application developer may create an application with a route that conflicts with a platform service route and receive traffic intended for the service.

Affected products

• Cloudfoundry Capi-Release: before 1.0.0 (fixed in 1.0.0)
• Cloudfoundry Cf-Release: before 237 (fixed in 237)

Published 2018-04-18. Last modified 2026-06-17.