Skip to content
OpenAdvisories

Vendor

VMware Tanzu

7 known vulnerabilities.

Products

VMware GemFire 2 VMware Tanzu GemFire for VMs 2 Concourse 1 Single Sign-On for VMware Tanzu 1 PCF Autoscaling 1 Operations Manager 1 VMware Tanzu Application Service for VMs 1 RabbitMQ 1 Pivotal Scheduler 1 Spring Cloud 0 Spring Cloud Contract < 4.1.1 0 Spring Cloud Contract < 4.0.5 0 Spring Cloud Contract < 3.1.10 0 Spring Security 0 Spring Framework 0 Spring Framework for Apache Kafka < 2.9.11 0 Spring Framework for Apache Kafka < 3.0.10 0 Spring Framework < 6.0.16 0 Spring Framework < 6.1.3 0 Spring Boot 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2020-5415

    Concourse's GitLab auth allows impersonation

    Concourse, versions prior to 6.3.1 and 6.4.1, in installations which use the GitLab auth connector, is vulnerable to identity spoofing by way of configuring a GitLab account with the same full name as another user who is granted access to a Concourse team. Gi…

    VMware Tanzu Concourse github.com/concourse/concourse github.com/concourse/dex Go
  • Critical 9.0
    CVE-2019-11286

    JMX Credential Deserialization in GemFire

    VMware GemFire versions prior to 9.10.0, 9.9.1, 9.8.5, and 9.7.5, and VMware Tanzu GemFire for VMs versions prior to 1.11.0, 1.10.1, 1.9.2, and 1.8.2, contain a JMX service available to the network which does not properly restrict input. A remote authenticate…

    VMware Tanzu VMware Tanzu GemFire for VMs VMware GemFire