CVE-2016-9880

The GemFire broker for Cloud Foundry 1.6.x before 1.6.5 and 1.7.x before 1.7.1 has multiple API endpoints which do not require authentication and could be used to gain access to the cluster managed by the broker.

• CWE-287

• http://www.securityfocus.com/bid/96146Third Party Advisory, VDB Entry
• https://pivotal.io/security/cve-2016-9880Vendor Advisory
• http://www.securityfocus.com/bid/96146Third Party Advisory, VDB Entry
• https://pivotal.io/security/cve-2016-9880Vendor Advisory

Published

Mar 16, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9874Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-9875Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-9876Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-9877An issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8…
• CVE-2016-9878An issue was discovered in Pivotal Spring Framework before 3…
• CVE-2016-9879An issue was discovered in Pivotal Spring Security before 3.…
• CVE-2016-9881Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9882An issue was discovered in Cloud Foundry Foundation cf-relea…7.5
• CVE-2016-9883Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9884Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9885An issue was discovered in Pivotal GemFire for PCF 1.6.x ver…
• CVE-2016-9886Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…