Pivotal Cloud Foundry vulnerabilities
2 vulnerabilities
Known vulnerabilities in Pivotal Cloud Foundry products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Credhub Service Broker1 vulnerabilities
- Pivotal Operations Manager1 vulnerabilities
CVE-2018-15795org.springframework.credhubspring-credhub-core+2
EPSS score1.30%
Pivotal CredHub Service Broker, versions prior to 1.1.0, uses a guessable form of random number generation in creating service broker's UAA client. A remote malicious user may guess the client secret and obtain or modify credentials for users of the CredHub Service.CVE-2018-15762pivotal cloud foundrypivotal operations manager+1EPSS score1.08%
Pivotal Operations Manager, versions 2.0.x prior to 2.0.24, versions 2.1.x prior to 2.1.15, versions 2.2.x prior to 2.2.7, and versions 2.3.x prior to 2.3.1, grants all users a scope which allows for privilege escalation. A remote malicious user who has been authenticated may create a new client with administrator privileges for Opsman.