PT-2016-4452 · Vmware+1 · Vcloud+2

Published 2016-09-18 · Updated 2016-10-03 · CVE-2016-0897

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Pivotal Cloud Foundry (PCF) Ops Manager versions 1.6.x through 1.6.16 Pivotal Cloud Foundry (PCF) Ops Manager versions 1.7.x through 1.7.7

Description The issue affects Pivotal Cloud Foundry (PCF) Ops Manager when used with vCloud or vSphere, and it is related to the improper enabling of SSH access for operators. This has an unspecified impact and can be exploited through remote attack vectors.

Recommendations For Pivotal Cloud Foundry (PCF) Ops Manager versions 1.6.x through 1.6.16, update to version 1.6.17 or later. For Pivotal Cloud Foundry (PCF) Ops Manager versions 1.7.x through 1.7.7, update to version 1.7.8 or later.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2016-0897

Affected Products

Pivotal Cloud Foundry (Pcf) Ops Manager

Vcloud

Vsphere

References · 3

• https://osv.dev/vulnerability/CVE-2016-0897 · Vendor Advisory
• https://pivotal.io/security/cve-2016-0897 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-0897 · Security Note