Skip to content
OpenAdvisories

Product · Pivotal

Apps Manager

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2019-3793

    Invitations Service supports HTTP connections

    Pivotal Apps Manager Release, versions 665.0.x prior to 665.0.28, versions 666.0.x prior to 666.0.21, versions 667.0.x prior to 667.0.7, contain an invitation service that accepts HTTP. A remote unauthenticated user could listen to network traffic and gain ac…

    Pivotal Apps Manager
  • High 8.0
    CVE-2019-3777

    Apps Manager unverified SSL certs in Cloud Controller proxy

    Pivotal Application Service (PAS), versions 2.2.x prior to 2.2.12, 2.3.x prior to 2.3.7 and 2.4.x prior to 2.4.3, contain apps manager that uses a cloud controller proxy that fails to verify SSL certs. A remote unauthenticated attacker that could hijack the C…

    Pivotal Pivotal Application Service Apps Manager