CVE-2016-0930

CRITICAL

Pivotal Cloud Foundry (PCF) Ops Manager <1.6.19 and 1.7.x <1.7.10 -...

Title source: llm
STIX 2.1

Description

Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.19 and 1.7.x before 1.7.10, when vCloud or vSphere is used, has a default password for compilation VMs, which allows remote attackers to obtain SSH access by connecting within an installation-time period during which these VMs exist.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/93027
Vendor Advisory x_refsource_confirm
https://pivotal.io/security/cve-2016-0930

Scores

CVSS v3 9.8
EPSS 0.0103
EPSS Percentile 59.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-362
Status published
Products (11)
pivotal/operations_manager 1.7.0
pivotal/operations_manager 1.7.1
pivotal/operations_manager 1.7.2
pivotal/operations_manager 1.7.3
pivotal/operations_manager 1.7.4
pivotal/operations_manager 1.7.5
pivotal/operations_manager 1.7.6
pivotal/operations_manager 1.7.7
pivotal/operations_manager 1.7.8
pivotal/operations_manager 1.7.9
... and 1 more
Published Sep 18, 2016
Tracked Since Feb 18, 2026