CPE Details
Pivotal Software Operations Manager 2.2.15
2.2.15
2019-05-30
19h03 +00:00
19h03 +00:00
2019-05-30
19h03 +00:00
19h03 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:pivotal_software:operations_manager:2.2.15:*:*:*:*:*:*:*
Informations
Vendor
pivotal_softwareProduct
operations_managerVersion
2.2.15Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| The Pivotal Ops Manager, 2.2.x versions prior to 2.2.23, 2.3.x versions prior to 2.3.16, 2.4.x versions prior to 2.4.11, and 2.5.x versions prior to 2.5.3, contain configuration that circumvents refresh token expiration. A remote authenticated user can gain access to a browser session that was supposed to have expired, and access Ops Manager resources. | 6.1 |
Medium |
||
| Pivotal Operations Manager, 2.1.x versions prior to 2.1.20, 2.2.x versions prior to 2.2.16, 2.3.x versions prior to 2.3.10, 2.4.x versions prior to 2.4.3, contains a reflected cross site scripting vulnerability. A remote user that is able to convince an Operations Manager user to interact with malicious content could execute arbitrary JavaScript in the user's browser. | 7.2 |
High |
