CPE Details
Pivotal Software Operations Manager 2.4.12
2.4.12
2019-05-30
19h03 +00:00
19h03 +00:00
2019-05-30
19h03 +00:00
19h03 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:pivotal_software:operations_manager:2.4.12:*:*:*:*:*:*:*
Informations
Vendor
pivotal_softwareProduct
operations_managerVersion
2.4.12Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| Pivotal Ops Manager, versions 2.4.x prior to 2.4.27, 2.5.x prior to 2.5.24, 2.6.x prior to 2.6.16, and 2.7.x prior to 2.7.5, logs all query parameters to tomcat’s access file. If the query parameters are used to provide authentication, ie. credentials, then they will be logged as well. | 6.5 |
Moyen |
||
| Cloud Foundry UAA versions prior to v73.4.0 contain a vulnerability where a malicious client possessing the 'clients.write' authority or scope can bypass the restrictions imposed on clients created via 'clients.write' and create clients with arbitrary scopes that the creator does not possess. | 7.5 |
Haute |
