Pivotal Software Cloud Foundry vulnerabilities

• cloud foundry credhub, pivotal software cloud foundry cf-deployment +1 more CredHub does not properly enable TLS for MySQL database connections CVE-2020-5399 7.6 HighFebruary 12, 2020
• cloud foundry smb volume, pivotal software cloud foundry smb volume, cloud foundry cf deployment +1 more +3 more Password leak in smbdriver logs CVE-2019-11283 8.8 HighOctober 23, 2019
• pivotal software cloud foundry uaa, cloud foundry cf deployment, uaa release +1 more +3 more UAA is vulnerable to a Blind SCIM injection leading to information disclosure CVE-2019-11282 4.3 MediumOctober 23, 2019
• pivotal software cloud foundry uaa, cloud foundry uaa release (oss), pivotal software application service +1 more +3 more UAA clients.write vulnerability CVE-2019-11270 7.3 HighAugust 5, 2019
• pivotal software cloud foundry uaa, cloud foundry uaa release (oss) +1 more UAA - Login app subject to clickjacking attack CVE-2019-3794 6.5 MediumJuly 18, 2019
• cloud foundry uaa release (oss), pivotal software cloud foundry uaa-release +1 more UAA SQL Identity Zone Vulnerability CVE-2019-11268 6.5 MediumJuly 11, 2019
• cloud foundry uaa release (oss), pivotal software cloud foundry uaa-release +1 more UAA defaults email address to an insecure domain CVE-2019-3787 8.3 HighJune 19, 2019
• cloud foundry uaa release, pivotal software cloud foundry uaa-release +1 more UAA can issue tokens across identity providers if users with matching usernames exist CVE-2018-15754 4.2 MediumDecember 13, 2018
• cloud foundry nfs volume release, pivotal software cloud foundry nfs volume +1 more NFS Volume release errand leaks cf admin credentials in logs CVE-2018-15797 8.4 HighDecember 5, 2018
• cloud foundry uaa, uaa release, pivotal software cloud foundry uaa +1 more +3 more UAA Privilege Escalation CVE-2018-15761 Fix available 9.9 CriticalNovember 19, 2018
• pivotal software cloud foundry log cache, cloud foundry log-cache-release +1 more Log Cache logs UAA client secret on startup CVE-2018-1264 9.1 CriticalOctober 5, 2018
• pivotal cloud foundry elastic runtime Pivotal Cloud Foundry Elastic Runtime version 1.4.0 through 1.4.5, 1.5.0 through 1.5.11 and 1.6.0... CVE-2016-0715 5.9 MediumSeptember 11, 2018
• cloud foundry uaa, pivotal software cloud foundry uaa +1 more Cloud Foundry UAA accepts refresh token as access token on admin endpoints CVE-2018-11047 Fix available 7.5 HighJuly 24, 2018
• cloud foundry uaa, pivotal software cloud foundry uaa, cloud foundry uaa-release +2 more Cloud Foundry UAA open redirect CVE-2018-11041 Fix available 6.1 MediumJune 25, 2018
• cloud foundry diego, pivotal software cloud foundry diego, cloudfoundry cf-deployment +2 more Cloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in... CVE-2018-1265 7.2 HighJune 6, 2018
• cloud foundry cloudfoundry uaa, cloudfoundry cf-deployment, pivotal software cloud foundry uaa +1 more +3 more UAA privilege escalation across identity zones CVE-2018-1262 Fix available 7.2 HighMay 15, 2018
• cloudfoundry cf-release, pivotal software cloud foundry elastic runtime +1 more Applications in cf-release before 245 can be configured and pushed with a user-provided custom... CVE-2016-6658 9.6 CriticalMarch 29, 2018
• dell emc gemfire broker for cloud foundry, pivotal software gemfire for pivotal cloud foundry +1 more The GemFire broker for Cloud Foundry 1.6.x before 1.6.5 and 1.7.x before 1.7.1 has multiple API... CVE-2016-9880 9.8 CriticalMarch 16, 2018
• pivotal software cloud foundry uaa, cloud foundry cf-deployment, cloud foundry cf-release +1 more +3 more Cloud Foundry UAA SessionID present in Audit Event Logs CVE-2018-1192 Fix available 8.8 HighFebruary 1, 2018
• cloudfoundry cf-release, pivotal software cloud foundry elastic runtime, cloud foundry uaa +2 more Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF)... CVE-2015-5173 8.8 HighOctober 24, 2017
• cloudfoundry cf-release, pivotal software cloud foundry elastic runtime, cloud foundry uaa +2 more Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password CVE-2015-5172 Fix available 9.8 CriticalOctober 24, 2017
• cloudfoundry cf-release, pivotal software cloud foundry elastic runtime, cloud foundry uaa +2 more Cloud Foundry Runtime Insufficient Session Expiration vulnerability CVE-2015-5171 Fix available 9.8 CriticalOctober 24, 2017
• cloudfoundry cf-release, pivotal software cloud foundry elastic runtime, cloud foundry uaa +2 more Cloud Foundry Runtime Cross-Site Request Forgery vulnerability CVE-2015-5170 Fix available 8.8 HighOctober 24, 2017
• cloudfoundry cloud foundry, pivotal software cloud foundry cf, cloud foundry uaa +1 more +3 more Cloud Foundry UAA Identity Zone Admin Privilege Escalation CVE-2017-8032 Fix available 6.6 MediumJuly 10, 2017
• cloudfoundry cloud foundry, cloud foundry uaa bosh, pivotal software cloud foundry cf +1 more +3 more An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v263; UAA... CVE-2017-4994 7.5 HighJune 13, 2017
• cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry uaa +1 more +3 more Cloud Foundry UAA privilege escalation with user invitations CVE-2017-4992 Fix available 9.8 CriticalJune 13, 2017
• cloud foundry uaa, cloudfoundry cf-release, pivotal software cloud foundry uaa +1 more +3 more Cloud Foundry UAA password reset vulnerability CVE-2017-4991 Fix available 7.2 HighJune 13, 2017
• cloud foundry uaa, cloudfoundry cf-release, pivotal software cloud foundry uaa +1 more +3 more Blind SQL Injection with privileged Cloud Foundry UAA endpoints CVE-2017-4974 Fix available 6.5 MediumJune 13, 2017
• cloud foundry uaa, pivotal software cloud foundry uaa, cloudfoundry cloud foundry uaa bosh +1 more +3 more Cloud Foundry UAA Privilege Escalation CVE-2017-4973 Fix available 8.8 HighJune 13, 2017
• cloud foundry uaa, cloudfoundry cf-release, cloud foundry uaa bosh +1 more +3 more An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA... CVE-2017-4972 7.5 HighJune 13, 2017
• pivotal software cloud foundry cf-release, cloud foundry uaa, cloud foundry uaa-release +2 more An issue was discovered in Cloud Foundry Foundation Cloud Foundry release v252 and earlier... CVE-2017-4963 8.1 HighJune 13, 2017
• pivotal software cloud foundry elastic runtime An issue was discovered in Pivotal PCF Elastic Runtime 1.8.x versions prior to 1.8.29 and 1.9.x... CVE-2017-4959 8.8 HighJune 13, 2017
• pivotal software cloud foundry elastic runtime An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.65, 1.7.x... CVE-2017-4955 9.8 CriticalJune 13, 2017
• pivotal software cloud foundry elastic runtime An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.60, 1.7.x... CVE-2017-2773 9.8 CriticalJune 13, 2017
• cloudfoundry cloud foundry, pivotal software cloud foundry uaa, login-server +2 more +4 more Cloud Foundry UAA reset password vulnerable to brute force attack CVE-2016-3084 Fix available 8.1 HighMay 25, 2017
• cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +2 more The Loggregator Traffic Controller endpoints in cf-release v231 and lower, Pivotal Elastic... CVE-2016-2165 6.5 MediumMay 25, 2017
• cloudfoundry cloud foundry, pivotal software login-server, cloudfoundry cloud foundry uaa bosh +2 more +4 more The UAA OAuth approval pages in Cloud Foundry v208 to v231, Login-server v1.6 to v1.14, UAA v2.0... CVE-2016-0781 6.1 MediumMay 25, 2017
• cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +2 more It was discovered that cf-release v231 and lower, Pivotal Cloud Foundry Elastic Runtime 1.5.x... CVE-2016-0780 7.5 HighMay 25, 2017
• cloudfoundry cloud foundry, garden linux, pivotal software cloud foundry elastic runtime +2 more Cloud Foundry Garden-Linux versions prior to v0.333.0 and Elastic Runtime 1.6.x version prior to... CVE-2016-0761 9.8 CriticalMay 25, 2017
• cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +1 more +3 more With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or... CVE-2015-3191 8.8 HighMay 25, 2017
• cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +1 more +3 more With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or... CVE-2015-3190 6.1 MediumMay 25, 2017
• cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +1 more +3 more Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password CVE-2015-3189 Fix available 3.7 LowMay 25, 2017
• cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +2 more A path traversal vulnerability was identified in the Cloud Foundry component Cloud Controller... CVE-2015-1834 6.5 MediumMay 25, 2017
• pivotal software cloud foundry, cloud foundry elastic runtime +1 more The Cloud Controller in Cloud Foundry before 239 logs user-provided service objects at creation,... CVE-2016-5006 9.8 CriticalMay 2, 2017
• pivotal software cloud foundry, cloud foundry elastic runtime, cloud foundry uaa +1 more +3 more Cloud Foundry vulnerable to Improper Certificate Validation CVE-2016-5016 Fix available 5.9 MediumApril 24, 2017
• pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry elastic runtime +2 more +4 more SQL injection vulnerability in Pivotal Cloud Foundry (PCF) before 238; UAA 2.x before 2.7.4.4, 3... CVE-2016-4468 Public exploit 8.8 HighApril 11, 2017
• pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry uaa +2 more Cloud Foundry denial of service vulnerability CVE-2017-4960 Fix available 7.5 HighMarch 10, 2017
• pivotal software gemfire for pivotal cloud foundry An issue was discovered in Pivotal GemFire for PCF 1.6.x versions prior to 1.6.5 and 1.7.x... CVE-2016-9885 9.8 CriticalJanuary 6, 2017
• pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry uaa +2 more Cloud Foundry before 248; UAA 2.x before 2.7.4.12, 3.x before 3.6.5, and 3.7.x through 3.9.x... CVE-2016-6659 8.1 HighDecember 23, 2016
• pivotal software cloud foundry elastic runtime, cloud foundry ops manager +1 more An open redirect vulnerability has been detected with some Pivotal Cloud Foundry Elastic Runtime... CVE-2016-6657 7.4 HighDecember 16, 2016
• Show olderLoading…