8.8

CVE-2018-11086

Pivotal Usage Service in Pivotal Application Service, versions 2.0 prior to 2.0.21 and 2.1 prior to 2.1.13 and 2.2 prior to 2.2.5, contains a bug which may allow escalation of privileges. A space developer with access to the system org may be able to access an artifact which contains the CF admin credential, allowing them to escalate to an admin role.

Data is provided by the National Vulnerability Database (NVD)
Pivotal Software ≫ Pivotal Application Service Version >= 2.0.0 < 2.0.21
Pivotal Software ≫ Pivotal Application Service Version >= 2.1.0 < 2.1.13
Pivotal Software ≫ Pivotal Application Service Version >= 2.2.0 < 2.2.5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.34% 0.533
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N
https://pivotal.io/security/cve-2018-11086
Vendor Advisory
Mitigation