Pivotal Operations Manager, versions 2.0.x prior to 2.0.24, versions 2.1.x prior to 2.1.15, versions 2.2.x prior to 2.2.7, and versions 2.3.x prior to 2.3.1, grants all users a scope which allows for privilege escalation. A remote malicious user who has been authenticated may create a new client with administrator privileges for Opsman.
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HPivotal Software Operations Manager
APPPivotal Software2.0.0 – 2.0.24 (excl.)2.1.0 – 2.1.15 (excl.)2.2.0 – 2.2.7 (excl.)2.3.0 – 2.3.1 (excl.)
Related vulnerabilities
Pivotal PCF Ops Manager — wspólny klucz szyfrowania sesji umożliwia Auth Bypass
Nieprawidłowa konfiguracja dostępu SSH w Pivotal Cloud Foundry Ops Manager
Cloud Foundry UAA versions prior to v73.4.0 contain a vulnerability where a malicious client possessing the 'c...
Pivotal Operations Manager, 2.1.x versions prior to 2.1.20, 2.2.x versions prior to 2.2.16, 2.3.x versions pri...
Pivotal Operations Manager, versions 2.2.x prior to 2.2.1, 2.1.x prior to 2.1.11, 2.0.x prior to 2.0.16, and 1...