PT-2018-10266 · Nginx+1 · Nginx+1

Publicado 2018-06-25 · Atualizado 2018-08-30 · CVE-2018-11046

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Pivotal Operations Manager versions 2.0.14 Pivotal Operations Manager versions 2.1.x prior to 2.1.6

Description The issue concerns unpatched security vulnerabilities in NGINX packages included in Pivotal Operations Manager. An attacker with access to the NGINX processes and knowledge of how to exploit these vulnerabilities may impact Operations Manager.

Recommendations For version 2.0.14, update to a version that includes the necessary security patches for NGINX. For versions 2.1.x prior to 2.1.6, update to version 2.1.6 or later to include the necessary security patches for NGINX.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-11046

Produtos afetados

Nginx

Pivotal Operations Manager

Referências · 4

• https://pivotal.io/security/cve-2018-11046 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-11046 · Nota de Segurança
• http://securityfocus.com/bid/104545 · Nota
• https://osv.dev/vulnerability/CVE-2018-11046 · Aviso do Fabricante