CVE-2016-6636

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-6636
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-6636.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2016-6636
Published
2016-09-30T00:59:00.180Z
Modified
2026-06-18T03:57:40.430887567Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

The OAuth authorization implementation in Pivotal Cloud Foundry (PCF) before 242; UAA 2.x before 2.7.4.7, 3.x before 3.3.0.5, and 3.4.x before 3.4.4; UAA BOSH before 11.5 and 12.x before 12.5; Elastic Runtime before 1.6.40, 1.7.x before 1.7.21, and 1.8.x before 1.8.1; and Ops Manager 1.7.x before 1.7.13 and 1.8.x before 1.8.1 mishandles redirect_uri subdomains, which allows remote attackers to obtain implicit access tokens via a modified subdomain.

Database specific 
{
    "unresolved_ranges": [
        {
            "vendor_product": "pivotal_software:cloud_foundry",
            "extracted_events": [
                {
                    "last_affected": "241"
                }
            ],
            "cpes": [
                "cpe:2.3:a:pivotal_software:cloud_foundry:*:*:*:*:*:*:*:*"
            ],
            "source": "CPE_RANGE"
        },
        {
            "vendor_product": "pivotal_software:cloud_foundry_elastic_runtime",
            "extracted_events": [
                {
                    "last_affected": "1.6.0"
                },
                {
                    "last_affected": "1.6.6"
                },
                {
                    "last_affected": "1.6.6"
                },
                {
                    "last_affected": "1.6.7"
                },
                {
                    "last_affected": "1.6.7"
                },
                {
                    "last_affected": "1.6.8"
                },
                {
                    "last_affected": "1.6.8"
                },
                {
                    "last_affected": "1.6.9"
                },
                {
                    "last_affected": "1.6.9"
                },
                {
                    "last_affected": "1.6.10"
                },
                {
                    "last_affected": "1.6.10"
                },
                {
                    "last_affected": "1.6.11"
                },
                {
                    "last_affected": "1.6.11"
                },
                {
                    "last_affected": "1.6.12"
                },
                {
                    "last_affected": "1.6.12"
                },
                {
                    "last_affected": "1.6.13"
                },
                {
                    "last_affected": "1.6.13"
                },
                {
                    "last_affected": "1.6.14"
                },
                {
                    "last_affected": "1.6.14"
                },
                {
                    "last_affected": "1.6.15"
                },
                {
                    "last_affected": "1.6.15"
                },
                {
                    "last_affected": "1.6.17"
                },
                {
                    "last_affected": "1.6.17"
                },
                {
                    "last_affected": "1.6.18"
                },
                {
                    "last_affected": "1.6.18"
                },
                {
                    "last_affected": "1.6.19"
                },
                {
                    "last_affected": "1.6.19"
                },
                {
                    "last_affected": "1.6.20"
                },
                {
                    "last_affected": "1.6.20"
                },
                {
                    "last_affected": "1.6.21"
                },
                {
                    "last_affected": "1.6.21"
                },
                {
                    "last_affected": "1.6.22"
                },
                {
                    "last_affected": "1.6.22"
                },
                {
                    "last_affected": "1.6.23"
                },
                {
                    "last_affected": "1.6.23"
                },
                {
                    "last_affected": "1.6.25"
                },
                {
                    "last_affected": "1.6.25"
                },
                {
                    "last_affected": "1.6.26"
                },
                {
                    "last_affected": "1.6.26"
                },
                {
                    "last_affected": "1.6.27"
                },
                {
                    "last_affected": "1.6.27"
                },
                {
                    "last_affected": "1.6.28"
                },
                {
                    "last_affected": "1.6.28"
                },
                {
                    "last_affected": "1.6.29"
                },
                {
                    "last_affected": "1.6.29"
                },
                {
                    "last_affected": "1.6.30"
                },
                {
                    "last_affected": "1.6.30"
                },
                {
                    "last_affected": "1.6.31"
                },
                {
                    "last_affected": "1.6.31"
                },
                {
                    "last_affected": "1.6.32"
                },
                {
                    "last_affected": "1.6.32"
                },
                {
                    "last_affected": "1.6.33"
                },
                {
                    "last_affected": "1.6.33"
                },
                {
                    "last_affected": "1.6.34"
                },
                {
                    "last_affected": "1.6.34"
                },
                {
                    "last_affected": "1.6.35"
                },
                {
                    "last_affected": "1.6.35"
                },
                {
                    "last_affected": "1.6.36"
                },
                {
                    "last_affected": "1.6.36"
                },
                {
                    "last_affected": "1.6.37"
                },
                {
                    "last_affected": "1.6.37"
                },
                {
                    "last_affected": "1.6.38"
                },
                {
                    "last_affected": "1.6.38"
                },
                {
                    "last_affected": "1.6.39"
                },
                {
                    "last_affected": "1.6.39"
                },
                {
                    "last_affected": "1.7.3"
                },
                {
                    "last_affected": "1.7.3"
                },
                {
                    "last_affected": "1.7.4"
                },
                {
                    "last_affected": "1.7.4"
                },
                {
                    "last_affected": "1.7.5"
                },
                {
                    "last_affected": "1.7.5"
                },
                {
                    "last_affected": "1.7.6"
                },
                {
                    "last_affected": "1.7.6"
                },
                {
                    "last_affected": "1.7.7"
                },
                {
                    "last_affected": "1.7.7"
                },
                {
                    "last_affected": "1.7.8"
                },
                {
                    "last_affected": "1.7.8"
                },
                {
                    "last_affected": "1.7.9"
                },
                {
                    "last_affected": "1.7.9"
                },
                {
                    "last_affected": "1.7.10"
                },
                {
                    "last_affected": "1.7.10"
                },
                {
                    "last_affected": "1.7.11"
                },
                {
                    "last_affected": "1.7.11"
                },
                {
                    "last_affected": "1.7.12"
                },
                {
                    "last_affected": "1.7.12"
                },
                {
                    "last_affected": "1.7.13"
                },
                {
                    "last_affected": "1.7.13"
                },
                {
                    "last_affected": "1.7.14"
                },
                {
                    "last_affected": "1.7.14"
                },
                {
                    "last_affected": "1.7.15"
                },
                {
                    "last_affected": "1.7.15"
                },
                {
                    "last_affected": "1.7.16"
                },
                {
                    "last_affected": "1.7.16"
                },
                {
                    "last_affected": "1.7.17"
                },
                {
                    "last_affected": "1.7.17"
                },
                {
                    "last_affected": "1.7.18"
                },
                {
                    "last_affected": "1.7.18"
                },
                {
                    "last_affected": "1.7.19"
                },
                {
                    "last_affected": "1.7.19"
                },
                {
                    "last_affected": "1.7.20"
                },
                {
                    "last_affected": "1.7.20"
                }
            ],
            "cpes": [
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.10:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.11:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.12:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.13:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.14:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.15:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.17:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.18:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.19:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.20:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.21:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.22:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.23:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.25:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.26:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.27:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.28:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.29:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.30:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.31:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.32:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.33:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.34:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.35:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.36:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.37:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.38:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.39:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.6:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.7:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.8:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.9:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.10:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.11:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.12:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.13:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.14:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.15:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.16:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.17:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.18:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.19:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.20:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.3:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.4:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.5:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.6:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.7:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.8:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.9:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING"
        },
        {
            "vendor_product": "pivotal_software:cloud_foundry_ops_manager",
            "extracted_events": [
                {
                    "last_affected": "1.7.0"
                },
                {
                    "last_affected": "1.7.1"
                },
                {
                    "last_affected": "1.7.2"
                },
                {
                    "last_affected": "1.7.3"
                },
                {
                    "last_affected": "1.7.4"
                },
                {
                    "last_affected": "1.7.5"
                },
                {
                    "last_affected": "1.7.6"
                },
                {
                    "last_affected": "1.7.7"
                },
                {
                    "last_affected": "1.7.8"
                },
                {
                    "last_affected": "1.7.9"
                },
                {
                    "last_affected": "1.7.10"
                },
                {
                    "last_affected": "1.7.11"
                },
                {
                    "last_affected": "1.7.12"
                },
                {
                    "last_affected": "1.8.0"
                }
            ],
            "cpes": [
                "cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.10:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.11:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.12:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.1:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.2:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.3:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.4:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.5:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.6:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.7:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.8:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.9:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.8.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING"
        }
    ]
}
References

Affected packages

Git / github.com/cloudfoundry/uaa

Affected ranges

Type
GIT
Repo
https://github.com/cloudfoundry/uaa
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ae59bf11fec166fd075b1dbead2ae16effa57e3f
Last affected
96b1fc8e3a982b6f478e363f3919a4a16e0a6a92
Last affected
58caa488fe3cc30f745b9f5079c42141d606436b
Last affected
e0080f861db5b30c0793973e5c4fff7153040ecb
Last affected
bb75c2730c921667652b4589d67bec2246b1f306
Last affected
cde7ba5da9b64cb45bd64c61c6fb2899bbc3e0f2
Last affected
585adc1bde0b242e204b6a6300e19ee5283c2bbe
Last affected
36efbc0bf6186a4abaf51c04e55cdb2d5e15091b
Last affected
3ce2a53c261790f5a4cbddff3dd4dcf4a82d69ac
Last affected
e6462b9089cbcd95b0c57d226fc16f49cd3ef3fc
Last affected
a32678a82805c9c8296a821129f2bf974ca65e2e
Last affected
091c5e5961dd33c8c7ca5a15f4020e47d266a1c3
Last affected
3172506e9a318f0b37dfb4f1d0fbc029720a6206
Last affected
eae6724659f5ef2fdf5d2ac6db1aba61087cc01a
Last affected
fc56717a849e02908b6c4c98d8a3fe9dda4a7cb2
Last affected
4d8876053a5062e4262b49eea5fa558da01db9f5
Last affected
ff0958c08a93fbbb5f01ec9986cc066dd4497f9c
Last affected
79188ac64074380c3ac5ff8dc32468e73e1c4c4b
Last affected
868d1b66623c20290f87c424a27cbf12220ef1fe
Last affected
848792d60da36dc3cca6e4f98fc26c32ff1ad852
Last affected
a54d147a0a0f2bad89b3cb768338acd3009cc815
Last affected
2324b38f690ff5809fefd8217b319c9dbdc10c99
Last affected
4f37e9b4f1a5da785ebc475559d2c64841daa163
Last affected
9b5c13d793ebfe358e26559cedc6b528a557b43f
Last affected
769e65183c297651cdd7bedab1dff112f9d38920
Last affected
616e8bcc58f9bc16f9d9ec806da1b0bf0f5dae85
Last affected
85fbe8ee080c50a86ac2f90fcdc705e3db6e82eb
Last affected
5c2377487bef9d716d5c8e5717df1fc00bc7b000
Last affected
23e4e93466820617370002ee806624425df68dae
Last affected
ddae2a131ab505ddf079a7db4289205098373244
Last affected
094f75188cc0606c5194cc64cf722c54ec8bfd2b
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.6.0"
        },
        {
            "last_affected": "1.6.1"
        },
        {
            "last_affected": "1.6.2"
        },
        {
            "last_affected": "1.6.3"
        },
        {
            "last_affected": "1.6.4"
        },
        {
            "last_affected": "1.6.5"
        },
        {
            "last_affected": "1.7.0"
        },
        {
            "last_affected": "1.7.1"
        },
        {
            "last_affected": "1.7.2"
        },
        {
            "last_affected": "1.8.0"
        },
        {
            "last_affected": "2.3.0"
        },
        {
            "last_affected": "2.3.1"
        },
        {
            "last_affected": "2.4.0"
        },
        {
            "last_affected": "2.5.1"
        },
        {
            "last_affected": "2.6.1"
        },
        {
            "last_affected": "2.7.0.2"
        },
        {
            "last_affected": "2.7.0.3"
        },
        {
            "last_affected": "2.7.1"
        },
        {
            "last_affected": "2.7.2"
        },
        {
            "last_affected": "2.7.3"
        },
        {
            "last_affected": "2.7.4.6"
        },
        {
            "last_affected": "3.0.0"
        },
        {
            "last_affected": "3.0.1"
        },
        {
            "last_affected": "3.1.0"
        },
        {
            "last_affected": "3.2.0"
        },
        {
            "last_affected": "3.2.1"
        },
        {
            "last_affected": "3.3.0"
        },
        {
            "last_affected": "3.3.0.1"
        },
        {
            "last_affected": "3.4.0"
        },
        {
            "last_affected": "3.4.1"
        },
        {
            "last_affected": "3.4.2"
        }
    ],
    "cpe": [
        "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.3.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.3.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.4.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.5.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.6.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.0.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.0.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.6:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.0.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.0.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.1.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.2.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.2.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.3.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.3.0.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.4.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.4.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.4.2:*:*:*:*:*:*:*"
    ],
    "source": "CPE_STRING"
}

Affected versions

1.*
1.0.1
1.0.3
1.1
1.1.1
1.1.2
1.10
1.11
1.2.0
1.2.6
1.4.0
1.4.1
1.4.2
1.4.3
1.4.5
1.4.6
1.4.7
1.5.0
1.5.2
1.5.2.1
1.5.3
1.5.4
1.5.4.1
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.8.2
1.8.3
1.9.0
1.9.1
2.*
2.0.0
2.0.1
2.0.2
2.0.3
2.1.0
2.2.4.1
2.2.5
2.2.6
2.3.0
2.3.1
2.3.1.1
2.4.0
2.4.1
2.5.0
2.5.1
2.5.2
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0.1
2.7.0.2
2.7.0.3
2.7.1
2.7.2
2.7.3
2.7.4
2.7.4.1
2.7.4.2
2.7.4.3
2.7.4.4
2.7.4.5
2.7.4.6
3.*
3.0.0
3.0.1
3.1.0
3.2.0
3.2.1
3.3.0
3.3.0.1
3.4.0
3.4.1
3.4.2
Other
lenient_hybrid_flow
travis-success-1475
travis-success-1478
travis-success-1497

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-6636.json"

Git / github.com/cloudfoundry/uaa-release

Affected ranges

Type
GIT
Repo
https://github.com/cloudfoundry/uaa-release
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b4b444b12a80357c4e64ba9e5c10ac998dc83c05
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "12.3"
        }
    ],
    "cpe": "cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE"
}

Affected versions

Other
ci-upgrade
v10
v11
v12
v2
v3
v6
v7
v8
v9
v12.*
v12.3

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-6636.json"