CVE-2019-3777
Apps Manager unverified SSL certs in Cloud Controller proxy
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 666.0.19, 665.0.26, 667.0.5, 2.4.3, 2.3.7, and 1 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
Pivotal Application Service (PAS), versions 2.2.x prior to 2.2.12, 2.3.x prior to 2.3.7 and 2.4.x prior to 2.4.3, contain apps manager that uses a cloud controller proxy that fails to verify SSL certs. A remote unauthenticated attacker that could hijack the Cloud Controller's DNS record could intercept access tokens sent to the Cloud Controller, giving the attacker access to the user's resources in the Cloud Controller
Timeline
- CVE published
- Record last updated
Affected versions
- Pivotal Apps Manager
From 666 · fixed in 666.0.19; From 665 · fixed in 665.0.26; From 667 · fixed in 667.0.5
- Pivotal Pivotal Application Service
From 2.4 · fixed in 2.4.3; From 2.3 · fixed in 2.3.7; From 2.2 · fixed in 2.2.12