Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 142

Export CSV
CVE-2019-3802

Additional information exposure with Spring Data JPA example matcher

This affects Spring Data JPA in versions up to and including 2.1.6, 2.0.14 and 1.11.20. ExampleMatcher using ExampleMatcher.StringMatcher.STARTING, ExampleMatcher.StringMatcher.ENDING or ExampleMatcher.StringMatcher.CONTAINING could return more results than anticipated when a maliciously crafted example value is supplied.

CVSS 3.1 · 5.3 Medium EPSS 1.2% KEV · Not listed
Vendors
Pivotal Software Redhat
Products
Spring Data Java Persistance Api Jboss Fuse
CVE-2019-3797

Additional information exposure with Spring Data JPA derived queries

This affects Spring Data JPA in versions up to and including 2.1.5, 2.0.13 and 1.11.19. Derived queries using any of the predicates ‘startingWith’, ‘endingWith’ or ‘containing’ could return more results than anticipated when a maliciously crafted query parameter value is supplied. Also, LIKE expressions in manually defined queries could return unexpected results if the parameter values bound did not have escaped reserved characters properly.

CVSS 3.0 · 3.5 Low EPSS 1.1% KEV · Not listed
Vendors
Pivotal Software Redhat
Products
Spring Data Java Persistence Api Jboss Fuse
CVE-2019-3794

UAA - Login app subject to clickjacking attack

Cloud Foundry UAA, versions prior to v73.4.0, does not set an X-FRAME-OPTIONS header on various endpoints. A remote user can perform clickjacking attacks on UAA's frontend sites.

CVSS 3.1 · 5.4 Medium EPSS 1.1% KEV · Not listed
Vendors
Pivotal Software
Products
Cloud Foundry Uaa
CVE-2019-3793

Invitations Service supports HTTP connections

Pivotal Apps Manager Release, versions 665.0.x prior to 665.0.28, versions 666.0.x prior to 666.0.21, versions 667.0.x prior to 667.0.7, contain an invitation service that accepts HTTP. A remote unauthenticated user could listen to network traffic and gain access to the authorization credentials used to make the invitation requests.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Pivotal Software
Products
Application Service
CVE-2019-3792

Concourse 5.0.0 SQL Injection vulnerability

Pivotal Concourse version 5.0.0, contains an API that is vulnerable to SQL injection. An Concourse resource can craft a version identifier that can carry a SQL injection payload to the Concourse server, allowing the attacker to read privileged data.

CVSS 3.0 · 6.8 Medium EPSS 1.1% KEV · Not listed
Vendors
Pivotal Software
Products
Concourse
CVE-2019-3790

Ops Manager uaa client issues tokens after refresh token expiration

The Pivotal Ops Manager, 2.2.x versions prior to 2.2.23, 2.3.x versions prior to 2.3.16, 2.4.x versions prior to 2.4.11, and 2.5.x versions prior to 2.5.3, contain configuration that circumvents refresh token expiration. A remote authenticated user can gain access to a browser session that was supposed to have expired, and access Ops Manager resources.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Pivotal Software
Products
Operations Manager
CVE-2019-3787

UAA defaults email address to an insecure domain

Cloud Foundry UAA, versions prior to 73.0.0, falls back to appending “unknown.org” to a user's email address when one is not provided and the user name does not contain an @ character. This domain is held by a private company, which leads to attack vectors including password recovery emails sent to a potentially fraudulent address. This would allow the attacker to gain complete control of the user's account.

CVSS 3.0 · 8.3 High EPSS 1.1% KEV · Not listed
Vendors
Pivotal Software
Products
Cloud Foundry Uaa-release
CVE-2019-3778

Open Redirect in spring-security-oauth2

Spring Security OAuth, versions 2.3 prior to 2.3.5, and 2.2 prior to 2.2.4, and 2.1 prior to 2.1.4, and 2.0 prior to 2.0.17, and older unsupported versions could be susceptible to an open redirector attack that can leak an authorization code. A malicious user or attacker can craft a request to the authorization endpoint using the authorization code grant type, and specify a manipulated redirection URI via the "redirect_uri" parameter. This can cause the authorization server to redirect the resource owner user-agent to a URI under the control of the attacker with the leaked authorization code. This vulnerability exposes applications that meet all of the following requirements: Act in the role of an Authorization Server (e.g. @EnableAuthorizationServer) and uses the DefaultRedirectResolver in the AuthorizationEndpoint. This vulnerability does not expose applications that: Act in the role of an Authorization Server and uses a different RedirectResolver implementation other than DefaultRedirectResolver, act in the role of a Resource Server only (e.g. @EnableResourceServer), act in the role of a Client only (e.g. @EnableOAuthClient).

CVSS 3.1 · 6.5 Medium EPSS 16.6% KEV · Not listed
Vendors
Oracle Pivotal Software
Products
Banking Corporate Lending Spring Security Oauth
CVE-2019-3777

Apps Manager unverified SSL certs in Cloud Controller proxy

Pivotal Application Service (PAS), versions 2.2.x prior to 2.2.12, 2.3.x prior to 2.3.7 and 2.4.x prior to 2.4.3, contain apps manager that uses a cloud controller proxy that fails to verify SSL certs. A remote unauthenticated attacker that could hijack the Cloud Controller's DNS record could intercept access tokens sent to the Cloud Controller, giving the attacker access to the user's resources in the Cloud Controller

CVSS 3.0 · 8 High EPSS 1.9% KEV · Not listed
Vendors
Pivotal Software
Products
Application Service
CVE-2019-3776

Reflected XSS in Pivotal Operations Manager

Pivotal Operations Manager, 2.1.x versions prior to 2.1.20, 2.2.x versions prior to 2.2.16, 2.3.x versions prior to 2.3.10, 2.4.x versions prior to 2.4.3, contains a reflected cross site scripting vulnerability. A remote user that is able to convince an Operations Manager user to interact with malicious content could execute arbitrary JavaScript in the user's browser.

CVSS 3.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Pivotal Software
Products
Operations Manager
CVE-2019-11292

Pivotal Ops Manager logs query parameters in tomcat access file

Pivotal Ops Manager, versions 2.4.x prior to 2.4.27, 2.5.x prior to 2.5.24, 2.6.x prior to 2.6.16, and 2.7.x prior to 2.7.5, logs all query parameters to tomcat’s access file. If the query parameters are used to provide authentication, ie. credentials, then they will be logged as well.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Pivotal Software
Products
Operations Manager
CVE-2019-11283

Password leak in smbdriver logs

Cloud Foundry SMB Volume, versions prior to v2.0.3, accidentally outputs sensitive information to the logs. A remote user with access to the SMB Volume logs can discover the username and password for volumes that have been recently created, allowing the user to take control of the SMB Volume.

CVSS 3.1 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Cloudfoundry Pivotal Software
Products
Cf-deployment Cloud Foundry Smb Volume
CVE-2019-11282

UAA is vulnerable to a Blind SCIM injection leading to information disclosure

Cloud Foundry UAA, versions prior to v74.3.0, contains an endpoint that is vulnerable to SCIM injection attack. A remote authenticated malicious user with scim.invite scope can craft a request with malicious content which can leak information about users of the UAA.

CVSS 3.1 · 4.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Cloudfoundry Pivotal Software
Products
Cf-deployment Cloud Foundry Uaa
CVE-2019-11281

RabbitMQ XSS attack

Pivotal RabbitMQ, versions prior to v3.7.18, and RabbitMQ for PCF, versions 1.15.x prior to 1.15.13, versions 1.16.x prior to 1.16.6, and versions 1.17.x prior to 1.17.3, contain two components, the virtual host limits page, and the federation management UI, which do not properly sanitize user input. A remote authenticated malicious user with administrative access could craft a cross site scripting attack that would gain access to virtual hosts and policy management information.

CVSS 3.1 · 4.8 Medium EPSS 1.2% KEV · Not listed
Vendors
Debian Fedoraproject Pivotal Software and 1 more
Products
Debian Linux Fedora Rabbitmq and 2 more
CVE-2019-11280

Privilege escalation through the invitations service

Pivotal Apps Manager, included in Pivotal Application Service versions 2.3.x prior to 2.3.18, 2.4.x prior to 2.4.14, 2.5.x prior to 2.5.10, and 2.6.x prior to 2.6.5, contains an invitations microservice which allows users to invite others to their organizations. A remote authenticated user can gain additional privileges by inviting themselves to spaces that they should not have access to.

CVSS 3.1 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Pivotal Software
Products
Pivotal Application Service
CVE-2019-11276

Apps Manager sends tokens to Spring apps via HTTP

Pivotal Apps Manager, included in Pivotal Application Service versions 2.3.x prior to 2.3.16, 2.4.x prior to 2.4.12, 2.5.x prior to 2.5.8, and 2.6.x prior to 2.6.3, makes a request to the /cloudapplication endpoint via Spring actuator, and subsequent requests via unsecured http. An adjacent unauthenticated user could eavesdrop on the network traffic and gain access to the unencrypted token allowing the attacker to read the type of access a user has over an app. They may also modify the logging level, potentially leading to lost information that would otherwise have been logged.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Pivotal Software
Products
Application Service
CVE-2019-11275

CSV Injection in usage report downloaded from Pivotal Application Manager

Pivotal Application Manager, versions 666.0.x prior to 666.0.36, versions 667.0.x prior to 667.0.22, versions 668.0.x prior to 668.0.21, versions 669.0.x prior to 669.0.13, and versions 670.0.x prior to 670.0.7, contain a vulnerability where a remote authenticated user can create an app with a name such that a csv program can interpret into a formula and gets executed. The malicious user can possibly gain access to a usage report that requires a higher privilege.

CVSS 3.1 · 4.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Pivotal Pivotal Software
Products
Apps Manager Pivotal Application Service
CVE-2019-11273

PKS Telemetry logs credentials

Pivotal Container Services (PKS) versions 1.3.x prior to 1.3.7, and versions 1.4.x prior to 1.4.1, contains a vulnerable component which logs the username and password to the billing database. A remote authenticated user with access to those logs may be able to retrieve non-sensitive information.

CVSS 3.1 · 4.3 Medium EPSS 1.0% KEV · Not listed
Vendors
Pivotal Software
Products
Pivotal Container Service
CVE-2019-11270

UAA clients.write vulnerability

Cloud Foundry UAA versions prior to v73.4.0 contain a vulnerability where a malicious client possessing the 'clients.write' authority or scope can bypass the restrictions imposed on clients created via 'clients.write' and create clients with arbitrary scopes that the creator does not possess.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Pivotal Software
Products
Application Service Cloud Foundry Uaa Operations Manager
CVE-2019-11269

Open Redirector in spring-security-oauth2

Spring Security OAuth versions 2.3 prior to 2.3.6, 2.2 prior to 2.2.5, 2.1 prior to 2.1.5, and 2.0 prior to 2.0.18, as well as older unsupported versions could be susceptible to an open redirector attack that can leak an authorization code. A malicious user or attacker can craft a request to the authorization endpoint using the authorization code grant type, and specify a manipulated redirection URI via the redirect_uri parameter. This can cause the authorization server to redirect the resource owner user-agent to a URI under the control of the attacker with the leaked authorization code.

CVSS 3.1 · 5.4 Medium EPSS 8.9% KEV · Not listed
Vendors
Oracle Pivotal Software
Products
Banking Corporate Lending Spring Security Oauth