pivotal software application service vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

Pivotal Apps Manager Release, versions 665.0.x before 665.0.28, versions 666.0.x before 666.0.21, versions 667.0.x before 667.0.7, contain an invitation service that accepts HTTP. A remote unauthenticated user could listen to network traffic and gain access to the authorization c...

Pivotal Software Application Service

9.8

CVSSv3

Pivotal Application Service (PAS), versions 2.2.x before 2.2.12, 2.3.x before 2.3.7 and 2.4.x before 2.4.3, contain apps manager that uses a cloud controller proxy that fails to verify SSL certs. A remote unauthenticated attacker that could hijack the Cloud Controller's DNS ...

Pivotal Software Application Service

9.8

CVSSv3

An issue exists in Pivotal GemFire for PCF 1.6.x versions before 1.6.5 and 1.7.x versions before 1.7.1. The gfsh (Geode Shell) endpoint, used by operators and application developers to connect to their cluster, is unauthenticated and publicly accessible. Because HTTPS communicati...

Pivotal Software Gemfire For Pivotal Cloud Foundry 1.7.0.0 Pivotal Software Gemfire For Pivotal Cloud Foundry 1.6.4.0 Pivotal Software Gemfire For Pivotal Cloud Foundry 1.6.3.0 Pivotal Software Gemfire For Pivotal Cloud Foundry 1.6.2 Pivotal Software Gemfire For Pivotal Cloud Foundry 1.6.1 Pivotal Software Gemfire For Pivotal Cloud Foundry 1.6.0.0

8.8

CVSSv3

Pivotal Apps Manager, included in Pivotal Application Service versions 2.3.x before 2.3.18, 2.4.x before 2.4.14, 2.5.x before 2.5.10, and 2.6.x before 2.6.5, contains an invitations microservice which allows users to invite others to their organizations. A remote authenticated us...

Pivotal Software Pivotal Application Service

8.8

CVSSv3

Pivotal Container Service, versions before 1.2.0, contains an information disclosure vulnerability which exposes IaaS credentials to application logs. A malicious user with access to application logs may be able to obtain IaaS credentials and perform actions using these credentia...

Pivotal Software Pivotal Container Service

8.8

CVSSv3

Pivotal Usage Service in Pivotal Application Service, versions 2.0 before 2.0.21 and 2.1 before 2.1.13 and 2.2 before 2.2.5, contains a bug which may allow escalation of privileges. A space developer with access to the system org may be able to access an artifact which contains t...

Pivotal Software Pivotal Application Service

8.8

CVSSv3

Pivotal Applications Manager in Pivotal Application Service, versions 2.0 before 2.0.21 and 2.1 before 2.1.13 and 2.2 before 2.2.5, contains a bug which may allow escalation of privileges. A space developer with access to the system org may be able to access an artifact which con...

Pivotal Software Pivotal Application Service

8.8

CVSSv3

Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted.

Pivotal Software Spring Security Vmware Spring Framework 5.0.5 Oracle Agile Plm 9.3.3 Oracle Agile Plm 9.3.4 Oracle Agile Plm 9.3.5 Oracle Agile Plm 9.3.6 Oracle Application Testing Suite 10.1 Oracle Application Testing Suite 12.5.0.3 Oracle Application Testing Suite 13.1.0.1 Oracle Application Testing Suite 13.2.0.1 Oracle Application Testing Suite 13.3.0.1 Oracle Big Data Discovery 1.6.0 Oracle Communications Converged Application Server Oracle Communications Diameter Signaling Router Oracle Communications Network Integrity Oracle Communications Performance Intelligence Center Oracle Communications Services Gatekeeper Oracle Endeca Information Discovery Integrator 3.1.0 Oracle Endeca Information Discovery Integrator 3.2.0 Oracle Enterprise Manager For Mysql Database 13.2 Oracle Enterprise Manager Ops Center 12.2.2 Oracle Enterprise Manager Ops Center 12.3.3

7.5

CVSSv3

Cloud Foundry UAA versions prior to v73.4.0 contain a vulnerability where a malicious client possessing the 'clients.write' authority or scope can bypass the restrictions imposed on clients created via 'clients.write' and create clients with arbitrary scopes t...

Pivotal Software Operations Manager Pivotal Software Application Service Pivotal Software Cloud Foundry Uaa

6.5

CVSSv3

Pivotal Apps Manager included in Pivotal Application Service, versions 2.2.x before 2.2.1 and 2.1.x before 2.1.8 and 2.0.x before 2.0.17 and 1.12.x before 1.12.26, does not escape all user-provided content when sending invitation emails. A malicious authenticated user can inject ...

Pivotal Software Pivotal Application Service

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook