CVE-2018-15762

Pivotal Operations Manager gives all users heightened privileges

State: Published
Severity: 9.0 Critical
Published: Nov 2, 2018
Updated: Sep 16, 2024
Reserved: Aug 23, 2018

Description

Pivotal Operations Manager, versions 2.0.x prior to 2.0.24, versions 2.1.x prior to 2.1.15, versions 2.2.x prior to 2.2.7, and versions 2.3.x prior to 2.3.1, grants all users a scope which allows for privilege escalation. A remote malicious user who has been authenticated may create a new client with administrator privileges for Opsman.

Scores

CVSS	Score	Vector	Source
3.0	9.0 Critical	CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	dell

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Pivotal Operations ManagerPivotal Cloud Foundry	2.0.x to before 2.0.24Affected 2.1.x to before 2.1.15Affected 2.2.x to before 2.2.7Affected 2.3.x to before 2.3.1Affected

References

https://pivotal.io/security/cve-2018-15762

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.