Vulnerabilidades em Pivotal
67 resultadosCVE-2016-0761—Cloud Foundry Garden-Linux versions prior to v0.333.0 and Elastic Runtime 1.6.x version prior to 1.6.17 contain a flaw in managing containerEPSS 1.6%CVE-2018-1256—Spring Cloud SSO Connector, version 2.1.2, contains a regression which disables issuer validation in resource servers that are not bound to EPSS 1.6%CVE-2019-11280HIGHPrivilege escalation through the invitations serviceEPSS 1.5%CVE-2018-1263—Addresses partial fix in CVE-2018-1261. Pivotal spring-integration-zip, versions prior to 1.0.2, exposes an arbitrary file write vulnerabiliEPSS 1.4%CVE-2018-11081HIGHPivotal Operations Manager UAA config - temp Ram DiskEPSS 1.4%CVE-2018-1278—Apps Manager included in Pivotal Application Service, versions 1.12.x prior to 1.12.22, 2.0.x prior to 2.0.13, and 2.1.x prior to 2.1.4 contEPSS 1.3%CVE-2018-1261—Spring-integration-zip versions prior to 1.0.1 exposes an arbitrary file write vulnerability, which can be achieved using a specially crafteEPSS 1.3%CVE-2016-0715—Pivotal Cloud Foundry Elastic Runtime version 1.4.0 through 1.4.5, 1.5.0 through 1.5.11 and 1.6.0 through 1.6.11 is vulnerable to a remote iEPSS 1.2%CVE-2018-11087—TLS validation errorEPSS 1.2%CVE-2014-0097—The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directoEPSS 1.2%CVE-2016-3084—The UAA reset password flow in Cloud Foundry release v236 and earlier versions, UAA release v3.3.0 and earlier versions, all versions of LogEPSS 1.2%CVE-2019-11281LOWRabbitMQ XSS attackEPSS 1.2%CVE-2018-15798HIGHPivotal Concourse allows malicious redirect urls on loginEPSS 1.1%CVE-2016-0780—It was discovered that cf-release v231 and lower, Pivotal Cloud Foundry Elastic Runtime 1.5.x versions prior to 1.5.17 and Pivotal Cloud FouEPSS 1.1%CVE-2016-8220—Pivotal Gemfire for PCF, versions 1.6.x prior to 1.6.5.0 and 1.7.x prior to 1.7.1.0, contain an information disclosure vulnerability. The apEPSS 1.1%CVE-2020-5403MEDIUMDoS Via Malformed URL with Reactor Netty HTTP ServerEPSS 1.1%CVE-2019-3792MEDIUMConcourse 5.0.0 SQL Injection vulnerabilityEPSS 1.1%CVE-2019-11292HIGHPivotal Ops Manager logs query parameters in tomcat access fileEPSS 1.1%CVE-2019-11275LOWCSV Injection in usage report downloaded from Pivotal Application ManagerEPSS 1.1%CVE-2019-3793HIGHInvitations Service supports HTTP connectionsEPSS 1.1%