Vulnerabilities (CVE)

Filtered by vendor Pivotal Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-4435 1 Pivotal 1 Bosh Stemcell 2017-10-02 6.8 MEDIUM 9.0 CRITICAL
An endpoint of the Agent running on the BOSH Director VM with stemcell versions prior to 3232.6 and 3146.13 may allow unauthenticated clients to read or write blobs or cause a denial of service attack on the Director VM. This vulnerability requires that the unauthenticated clients guess or find a URL matching an existing GUID.
CVE-2016-0930 1 Pivotal 1 Operations Manager 2016-11-28 5.0 MEDIUM 9.8 CRITICAL
Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.19 and 1.7.x before 1.7.10, when vCloud or vSphere is used, has a default password for compilation VMs, which allows remote attackers to obtain SSH access by connecting within an installation-time period during which these VMs exist.