9
CVE-2018-15762
- EPSS 0.22%
- Veröffentlicht 02.11.2018 22:29:00
- Zuletzt bearbeitet 21.11.2024 03:51:25
- Quelle security_alert@emc.com
- CVE-Watchlists
- Unerledigt
LoginPivotal Operations Manager gives all users heightened privileges
Pivotal Operations Manager, versions 2.0.x prior to 2.0.24, versions 2.1.x prior to 2.1.15, versions 2.2.x prior to 2.2.7, and versions 2.3.x prior to 2.3.1, grants all users a scope which allows for privilege escalation. A remote malicious user who has been authenticated may create a new client with administrator privileges for Opsman.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Pivotal Software ≫ Operations Manager Version >= 2.0.0 < 2.0.24
Pivotal Software ≫ Operations Manager Version >= 2.1.0 < 2.1.15
Pivotal Software ≫ Operations Manager Version >= 2.2.0 < 2.2.7
Pivotal Software ≫ Operations Manager Version >= 2.3.0 < 2.3.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.22% | 0.418 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 6.5 | 8 | 6.4 |
AV:N/AC:L/Au:S/C:P/I:P/A:P
|
| security_alert@emc.com | 9 | 2.3 | 6 |
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
|
CWE-269 Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.