CVE-2018-11045

State: Published
Severity: Not scored
Published: Jul 11, 2018
Updated: Sep 16, 2024
Reserved: May 14, 2018

Description

Pivotal Operations Manager, versions 2.1 prior to 2.1.6 and 2.0 prior to 2.0.15 and 1.12 prior to 1.12.22, contains a static Linux Random Number Generator (LRNG) seed file embedded in the appliance image. An attacker with knowledge of the exact version and IaaS of a running OpsManager could get the contents of the corresponding seed from the published image and therefore infer the initial state of the LRNG.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Pivotal Operations ManagerPivotal	2.1 to before 2.1.6Affected 2.0 to before 2.0.15Affected 1.12 to before 1.12.22Affected

References

https://pivotal.io/security/cve-2018-11045

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.