Read the docs

Pivotal

Records86All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical12CVSS 9.0–10.0
CVSS high42CVSS 7.0–8.9

Exploited now

Pivotal records in CISA KEV

No Pivotal vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Vmware Harbor Registry 4 records MEDIUM Cloud Foundry Deployment 2 records MEDIUM Cloud Foundry Elastic Runtime 2 records LOW Cloud Foundry Notifications 2 records LOW Cloud Foundry Routing Release 2 records MEDIUM Spring Security Oauth 2 records HIGH Application Service 1 record LOW Apps Manager 1 record LOW

Records

1 record in Application Service · all components

TI-2019-02812 CVE-2019-3800 · GHSA-2wpx-p7qg-954w

CF CLI writes the client id and secret to config file

Priority LOW 38

CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.02088 Published 2019-08-05 Fixed in v1.16.0, v6.45.0 CWE-522
Open these records in search →