CVE-2016-5006: Pivotal Software Cloud Foundry

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

The Cloud Controller in Cloud Foundry before 239 logs user-provided service objects at creation, which allows attackers to obtain sensitive user credential information via unspecified vectors.

Affected products

• Pivotal Software Cloud Foundry: up to and including 238.0
• Pivotal Software Cloud Foundry Elastic Runtime: up to and including 1.6.32; version 1.7.0 only; version 1.7.1 only; version 1.7.2 only; version 1.7.3 only; version 1.7.4 only; …

Published 2017-05-02. Last modified 2026-06-17.