5.9
CVE-2018-11045
- EPSS 0.3%
- Veröffentlicht 11.07.2018 20:29:00
- Zuletzt bearbeitet 21.11.2024 03:42:33
- Quelle security_alert@emc.com
- Teams Watchlist Login
- Unerledigt Login
Pivotal Operations Manager, versions 2.1 prior to 2.1.6 and 2.0 prior to 2.0.15 and 1.12 prior to 1.12.22, contains a static Linux Random Number Generator (LRNG) seed file embedded in the appliance image. An attacker with knowledge of the exact version and IaaS of a running OpsManager could get the contents of the corresponding seed from the published image and therefore infer the initial state of the LRNG.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Pivotal Software ≫ Operations Manager Version >= 1.12 < 1.12.22
Pivotal Software ≫ Operations Manager Version > 2.0 < 2.0.15
Pivotal Software ≫ Operations Manager Version >= 2.1.0 < 2.1.6
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.3% | 0.505 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.9 | 2.2 | 3.6 |
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:P/I:N/A:N
|
CWE-330 Use of Insufficiently Random Values
The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.