PT-2018-10941 · Pivotal · Apps Manager For Pcf

Publicado 2018-03-16 · Atualizado 2018-04-10 · CVE-2018-1200

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apps Manager for PCF versions 1.11.x through 1.11.25 Apps Manager for PCF versions 1.12.x through 1.12.13 Apps Manager for PCF versions 2.0.x through 2.0.4

Description The issue allows unprivileged remote file read in its container via specially-crafted links.

Recommendations For versions 1.11.x through 1.11.25, update to version 1.11.26 or later. For versions 1.12.x through 1.12.13, update to version 1.12.14 or later. For versions 2.0.x through 2.0.4, update to version 2.0.5 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2018-1200

Produtos afetados

Apps Manager For Pcf

Referências · 4

• https://osv.dev/vulnerability/CVE-2018-1200 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1200 · Nota de Segurança
• http://securityfocus.com/bid/103042 · Nota
• https://pivotal.io/security/cve-2018-1200 · Aviso do Fabricante