{"id":"CVE-2016-6659","details":"Cloud Foundry before 248; UAA 2.x before 2.7.4.12, 3.x before 3.6.5, and 3.7.x through 3.9.x before 3.9.3; and UAA bosh release (aka uaa-release) before 13.9 for UAA 3.6.5 and before 24 for UAA 3.9.3 allow attackers to gain privileges by accessing UAA logs and subsequently running a specially crafted application that interacts with a configured SAML provider.","modified":"2026-07-08T05:48:18.376028086Z","published":"2016-12-23T05:59:00.127Z","database_specific":{"unresolved_ranges":[{"vendor_product":"cloudfoundry:cloud_foundry_uaa_bosh","cpes":["cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:*:*:*:*:*:*:*:*"],"extracted_events":[{"last_affected":"23.0"}],"source":"CPE_RANGE"},{"source":"CPE_RANGE","vendor_product":"pivotal_software:cloud_foundry","cpes":["cpe:2.3:a:pivotal_software:cloud_foundry:*:*:*:*:*:*:*:*"],"extracted_events":[{"last_affected":"247.0"}]}]},"references":[{"type":"WEB","url":"http://www.securityfocus.com/bid/95085"},{"type":"ADVISORY","url":"https://www.cloudfoundry.org/cve-2016-6659/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/cloudfoundry/uaa","events":[{"introduced":"0"},{"last_affected":"69fc38968ecf6d0748acbfec7aac9ca32cf4ed3d"}],"database_specific":{"cpe":"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"3.9.2"}],"source":"CPE_RANGE"}}],"versions":["3.9.2","3.9.1","3.9.0","3.8.0","travis-success-1497","travis-success-1478","travis-success-1475","1.8.0","1.6.2","1.6.1","1.5.4.1","1.5.4","1.5.3","1.5.2.1","1.5.2","1.5.0","1.4.7","1.4.6","1.4.5","1.4.3","1.4.2","1.4.1","1.4.0","1.2.6","1.2.0","1.1.2","1.1.1","1.1","1.0.3","1.0.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6659.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}