Skip to content
OpenAdvisories

Vendor

VMware Tanzu

7 known vulnerabilities.

Products

VMware GemFire 2 VMware Tanzu GemFire for VMs 2 Concourse 1 Single Sign-On for VMware Tanzu 1 PCF Autoscaling 1 Operations Manager 1 VMware Tanzu Application Service for VMs 1 RabbitMQ 1 Pivotal Scheduler 1 Spring Cloud 0 Spring Cloud Contract < 4.1.1 0 Spring Cloud Contract < 4.0.5 0 Spring Cloud Contract < 3.1.10 0 Spring Security 0 Spring Framework 0 Spring Framework for Apache Kafka < 2.9.11 0 Spring Framework for Apache Kafka < 3.0.10 0 Spring Framework < 6.0.16 0 Spring Framework < 6.1.3 0 Spring Boot 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.7
    CVE-2020-5419

    RabbitMQ arbitrary code execution using local binary planting

    RabbitMQ versions 3.8.x prior to 3.8.7 are prone to a Windows-specific binary planting security vulnerability that allows for arbitrary code execution. An attacker with write privileges to the RabbitMQ installation directory and local access on Windows could …

    VMware Tanzu RabbitMQ
  • Medium 5.7
    CVE-2020-5414

    App Autoscaler logs credentials

    VMware Tanzu Application Service for VMs (2.7.x versions prior to 2.7.19, 2.8.x versions prior to 2.8.13, and 2.9.x versions prior to 2.9.7) contains an App Autoscaler that logs the UAA admin password. This credential is redacted on VMware Tanzu Operations Ma…

    VMware Tanzu Operations Manager PCF Autoscaling VMware Tanzu Application Service for VMs