Information disclosure in GemFire for PCF 1.6.x versions prior to 1.6.5 and 1.7.x…
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-200.
Summary
An issue was discovered in Pivotal GemFire for PCF 1.6.x versions prior to 1.6.5 and 1.7.x versions prior to 1.7.1. The gfsh (Geode Shell) endpoint, used by operators and application developers to connect to their cluster, is unauthenticated and publicly accessible. Because HTTPS communications are terminated at the gorouter, communications from the gorouter to GemFire clusters are unencrypted. An attacker could run any command available on gfsh and could cause denial of service, lost confidentiality of data, escalate privileges, or eavesdrop on other communications between the gorouter and the cluster.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | GemFire for PCF 1.6.x versions prior to 1.6.5 and 1.7.x versions prior to 1.7.1 | GemFire for PCF 1.6.x versions prior to 1.6.5 and 1.7.x versions prior to 1.7.1 | — | No fix listed | CNA |
- GemFire for PCF 1.6.x versions prior to 1.6.5 and 1.7.x versions prior to 1.7.1 Vendor— Affected GemFire for PCF 1.6.x versions prior to 1.6.5 and 1.7.x versions prior to 1.7.1 Fixed in — No fix listed CNA
CPE configurations NVD · 6
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:pivotal_software:gemfire_for_pivotal_cloud_foundry:1.6.0.0:*:*:*:*:*:*:* | 1.6.0.0 | Vulnerable | Spring by Pivotal |
| cpe:2.3:a:pivotal_software:gemfire_for_pivotal_cloud_foundry:1.6.1:*:*:*:*:*:*:* | 1.6.1 | Vulnerable | Spring by Pivotal |
| cpe:2.3:a:pivotal_software:gemfire_for_pivotal_cloud_foundry:1.6.2:*:*:*:*:*:*:* | 1.6.2 | Vulnerable | Spring by Pivotal |
| cpe:2.3:a:pivotal_software:gemfire_for_pivotal_cloud_foundry:1.6.3.0:*:*:*:*:*:*:* | 1.6.3.0 | Vulnerable | Spring by Pivotal |
| cpe:2.3:a:pivotal_software:gemfire_for_pivotal_cloud_foundry:1.6.4.0:*:*:*:*:*:*:* | 1.6.4.0 | Vulnerable | Spring by Pivotal |
| cpe:2.3:a:pivotal_software:gemfire_for_pivotal_cloud_foundry:1.7.0.0:*:*:*:*:*:*:* | 1.7.0.0 | Vulnerable | Spring by Pivotal |
- cpe:2.3:a:pivotal_software:gemfire_for_pivotal_cloud_foundry:1.6.0.0:*:*:*:*:*:*:* Versions 1.6.0.0 Vulnerable ·Spring by Pivotal
- cpe:2.3:a:pivotal_software:gemfire_for_pivotal_cloud_foundry:1.6.1:*:*:*:*:*:*:* Versions 1.6.1 Vulnerable ·Spring by Pivotal
- cpe:2.3:a:pivotal_software:gemfire_for_pivotal_cloud_foundry:1.6.2:*:*:*:*:*:*:* Versions 1.6.2 Vulnerable ·Spring by Pivotal
- cpe:2.3:a:pivotal_software:gemfire_for_pivotal_cloud_foundry:1.6.3.0:*:*:*:*:*:*:* Versions 1.6.3.0 Vulnerable ·Spring by Pivotal
- cpe:2.3:a:pivotal_software:gemfire_for_pivotal_cloud_foundry:1.6.4.0:*:*:*:*:*:*:* Versions 1.6.4.0 Vulnerable ·Spring by Pivotal
- cpe:2.3:a:pivotal_software:gemfire_for_pivotal_cloud_foundry:1.7.0.0:*:*:*:*:*:*:* Versions 1.7.0.0 Vulnerable ·Spring by Pivotal
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2016-9885
- 2026-10-03 Alias added: GHSA-xj9h-242g-rjqv
References
More Spring by Pivotal Gemfire For Pivotal Cloud Foundry vulnerabilities
- TI-2016-08006 Improper authentication in Dell EMC GemFire broker for Cloud Foundry CVSS 3.0CRITICAL 9.8
Sources
- CVE-2016-9885 · CVE Program
- CVE-2016-9885 · NVD
- FIRST EPSS
- GHSA-xj9h-242g-rjqv · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences