PT-2018-13188
CVE-2018-15762
·
تاريخ النشر
2018-11-02
·
تاريخ التحديث
2019-10-09
الوصف من
CVSS 3.1
9.0
حرجةالمقاييسAV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Pivotal Operations Manager versions 2.0.x through 2.0.23
Pivotal Operations Manager versions 2.1.x through 2.1.14
Pivotal Operations Manager versions 2.2.x through 2.2.6
Pivotal Operations Manager versions 2.3.x through 2.3.0
Description
The issue allows all users to be granted a scope that enables privilege escalation. A remote malicious user who has been authenticated can create a new client with administrator privileges for Opsman.
Recommendations
For versions 2.0.x through 2.0.23, update to version 2.0.24 or later.
For versions 2.1.x through 2.1.14, update to version 2.1.15 or later.
For versions 2.2.x through 2.2.6, update to version 2.2.7 or later.
For versions 2.3.x through 2.3.0, update to version 2.3.1 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾