Skip to content
OpenAdvisories

Vendor

VMware Tanzu

7 known vulnerabilities.

Products

VMware GemFire 2 VMware Tanzu GemFire for VMs 2 Concourse 1 Single Sign-On for VMware Tanzu 1 PCF Autoscaling 1 Operations Manager 1 VMware Tanzu Application Service for VMs 1 RabbitMQ 1 Pivotal Scheduler 1 Spring Cloud 0 Spring Cloud Contract < 4.1.1 0 Spring Cloud Contract < 4.0.5 0 Spring Cloud Contract < 3.1.10 0 Spring Security 0 Spring Framework 0 Spring Framework for Apache Kafka < 2.9.11 0 Spring Framework for Apache Kafka < 3.0.10 0 Spring Framework < 6.0.16 0 Spring Framework < 6.1.3 0 Spring Boot 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2020-5426

    Scheduler for TAS can transmit privileged UAA token in plaintext

    Scheduler for TAS prior to version 1.4.0 was permitting plaintext transmission of UAA client token by sending it over a non-TLS connection. This also depended on the configuration of the MySQL server which is used to cache a UAA client token used by the servi…

    VMware Tanzu Pivotal Scheduler
  • High 7.5
    CVE-2020-5425

    User Impersonation possible in Tanzu SSO

    Single Sign-On for Vmware Tanzu all versions prior to 1.11.3 ,1.12.x versions prior to 1.12.4 and 1.13.x prior to 1.13.1 are vulnerable to user impersonation attack.If two users are logged in to the SSO operator dashboard at the same time, with the same usern…

    VMware Tanzu Single Sign-On for VMware Tanzu