Read the docs

Pivotal

Records86All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical12CVSS 9.0–10.0
CVSS high42CVSS 7.0–8.9

Exploited now

Pivotal records in CISA KEV

No Pivotal vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Vmware Harbor Registry 4 records MEDIUM Cloud Foundry Deployment 2 records MEDIUM Cloud Foundry Elastic Runtime 2 records LOW Cloud Foundry Notifications 2 records LOW Cloud Foundry Routing Release 2 records MEDIUM Spring Security Oauth 2 records HIGH Application Service 1 record LOW Apps Manager 1 record LOW

Records

2 records in Cloud Foundry Routing Release · all components

TI-2023-16927 CVE-2023-34061 · GHSA-xr94-cv8c-7r6v

CVE-2023-34061 – Gorouter route pruning

Priority MEDIUM 40

Cloud Foundry routing release versions from v0.163.0 to v0.283.0 are vulnerable to a DOS attack.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00538 Published 2024-01-12 Fixed in 0.284.0, 33.6.0 CWE-400
TI-2019-02812 CVE-2019-3800 · GHSA-2wpx-p7qg-954w

CF CLI writes the client id and secret to config file

Priority LOW 38

CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.02088 Published 2019-08-05 Fixed in v1.16.0, v6.45.0 CWE-522
Open these records in search →