Pivotal Operations Manager vulnerabilities

2 vulnerabilities

Known vulnerabilities in Pivotal Operations Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.3CVE-2018-11049emcrsa_identity_governance_and_lifecycle+3
EPSS score
0.45%
RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA IMG releases have an uncontrolled search vulnerability. The installation scripts set an environment variable in an unintended manner. A local authenticated malicious user could trick the root user to run malicious code on the targeted system.5.9CVE-2018-11045pivotal_softwareoperations_manager+1
EPSS score
0.86%
Pivotal Operations Manager, versions 2.1 prior to 2.1.6 and 2.0 prior to 2.0.15 and 1.12 prior to 1.12.22, contains a static Linux Random Number Generator (LRNG) seed file embedded in the appliance image. An attacker with knowledge of the exact version and IaaS of a running OpsManager could get the contents of the corresponding seed from the published image and therefore infer the initial state of the LRNG.