CVE

Id
93459  
CVE No.
CVE-2016-6639  
Status
Candidate  
Description
Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.38 and 1.7.x before 1.7.19 and other products, place the .profile file in the htdocs directory, which might allow remote attackers to obtain sensitive information via an HTTP GET request for this file.  
Phase
Assigned (20160810)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
793755 93459 CVE-2016-6639 CONFIRM:https://github.com/cloudfoundry/php-buildpack/commit/e2db3ccd4812e0c0aba20720fc51789d981aba67  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4486 JVNDB-2016-005259 Windows および Mac OS X 上で稼動する Adobe Reader および Acrobat における任意のコードを実行される脆弱性 Windows および Mac OS X 上で稼動する Adobe Reader および Acrobat には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2016-6952 93459 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005259.html  View