Pivotal Software On Demand Services Sdk vulnerabilities

1 vulnerability

Known vulnerabilities in Pivotal Software On Demand Services Sdk, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2018-15759pivotal_softwarebroker_api+2
EPSS score
1.75%
Pivotal Cloud Foundry On Demand Services SDK, versions prior to 0.24 contain an insecure method of verifying credentials. A remote unauthenticated malicious user may make many requests to the service broker with different credentials, allowing them to infer valid credentials and gain access to perform broker operations.