Pivotal vulnerabilities
67 CVEs and advisories name Pivotal as an affected vendor, newest first. Follow it as a feed.
- CVE-2020-5409Concourse Open Redirect in the /sky/login endpoint
- CVE-2020-5406PCF Autoscaling logs its database credentials
- CVE-2020-5403DoS Via Malformed URL with Reactor Netty HTTP Server
- CVE-2020-5404Authentication Leak On Redirect With Reactor Netty HttpClient
- CVE-2019-11288tcServer JMX Socket Listener Registry Rebinding Local Privilege Escalation
- CVE-2013-6430The JavaScriptUtils.javaScriptEscape method in web/util/JavaScriptUtils.java in Spring MVC in Spring Framework before 3.2.2 does not properl
- CVE-2019-11292Pivotal Ops Manager logs query parameters in tomcat access file
- CVE-2019-11287RabbitMQ Web Management Plugin DoS via heap overflow
- CVE-2019-11291RabbitMQ XSS attack via federation and shovel endpoints
- CVE-2019-11284Reactor Netty authentication leak in redirects
- CVE-2019-11281RabbitMQ XSS attack
- CVE-2019-11275CSV Injection in usage report downloaded from Pivotal Application Manager
- CVE-2019-11280Privilege escalation through the invitations service
- CVE-2019-11276Apps Manager sends tokens to Spring apps via HTTP
- CVE-2019-11273PKS Telemetry logs credentials
- CVE-2019-3790Ops Manager uaa client issues tokens after refresh token expiration
- CVE-2019-3801Java Projects using HTTP to fetch dependencies
- CVE-2019-3788UAA redirect-uri allows wildcard in the subdomain
- CVE-2019-3793Invitations Service supports HTTP connections
- CVE-2019-3792Concourse 5.0.0 SQL Injection vulnerability
- CVE-2019-3777Apps Manager unverified SSL certs in Cloud Controller proxy
- CVE-2019-3776Reflected XSS in Pivotal Operations Manager
- CVE-2019-3803Concourse includes token in CLI authentication callback
- CVE-2018-15798Pivotal Concourse allows malicious redirect urls on login
- CVE-2018-1279RabbitMQ cluster compromise due to deterministically generated cookie
- CVE-2018-15759On Demand Services SDK Timing Attack Vulnerability
- CVE-2018-15758Privilege Escalation in spring-security-oauth2
- CVE-2018-15756DoS Attack via Range Requests
- CVE-2018-15763PKS leaks IaaS Credentials to Application Logs
- CVE-2018-11081Pivotal Operations Manager UAA config - temp Ram Disk