{"id":"CVE-2016-6655","details":"An issue was discovered in Cloud Foundry Foundation Cloud Foundry release versions prior to v245 and cf-mysql-release versions prior to v31. A command injection vulnerability was discovered in a common script used by many Cloud Foundry components. A malicious user may exploit numerous vectors to execute arbitrary commands on servers running Cloud Foundry.","modified":"2026-08-27T08:18:22.859867Z","published":"2017-06-13T06:29:00.190Z","references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/93889"},{"type":"FIX","url":"https://www.cloudfoundry.org/cve-2016-6655/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/cloudfoundry-attic/cf-release","events":[{"introduced":"0"},{"last_affected":"99d41c78761cca8a6d6ef477ff4e1aac5bdf03fb"}],"database_specific":{"cpe":"cpe:2.3:a:cloudfoundry:cf-release:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"244"}],"source":"CPE_RANGE"}}],"versions":["v244","v205","v183","v170","v161","v157","v156","rc145.0","v143","works-for-us","v140","v137","v136","v135","v134","v133","v132","scotty_09012012","v119","v109","v105","v104","v103","v102","v100","v99","-","log","list"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6655.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/cloudfoundry/cf-mysql-release","events":[{"introduced":"0"},{"last_affected":"4a7df1cbeb2083b19a1b1537bbfc755deb515434"}],"database_specific":{"cpe":"cpe:2.3:a:cloudfoundry:cf-mysql-release:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"30"}],"source":"CPE_RANGE"}}],"versions":["v30","v29","v28","v27","v27_alpha","v22","v24","v23","v21","v20","v18","v17","v16","v12","v11","v10","v9","mariadb","v8","v7","v6","v5","v4","v3","v2","v1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6655.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}