CVE-2018-15762: pivotal cloud foundry pivotal operations manager Improper Privilege Management
Vulnerability summary
CVE-2018-15762 is a critical (CVSS 9.0) Improper Privilege Management vulnerability in pivotal cloud foundry pivotal operations manager. EPSS estimates a 1.08% chance of exploitation in the next 30 days, higher than 64.4% of scored vulnerabilities.
Timeline
- 02-11-2018PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
Pivotal Operations Manager, versions 2.0.x prior to 2.0.24, versions 2.1.x prior to 2.1.15, versions 2.2.x prior to 2.2.7, and versions 2.3.x prior to 2.3.1, grants all users a scope which allows for privilege escalation. A remote malicious user who has been authenticated may create a new client with administrator privileges for Opsman.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST8.8HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
1.08%
Chance of exploitation in the next 30 days
Percentile
64%
Versus all other CVEs
30-day change
0.00 pp
From 1.08% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Pivotal cloud foundry1 product
- pivotal operations manager≥ 2.0.x, < 2.0.24 | ≥ 2.1.x, < 2.1.15 | ≥ 2.2.x, < 2.2.7 | ≥ 2.3.x, < 2.3.1
Pivotal_software1 product
- operations_manager≥ 2.0.0, < 2.0.24 | ≥ 2.1.0, < 2.1.15 | ≥ 2.2.0, < 2.2.7 | ≥ 2.3.0, < 2.3.1
2 vendors · 2 products