https://vulnogram.org/ Most recent CVEs assigned by pivotal (pivotal). https://vulnogram.org/seaview/icons/pivotal.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:08 GMT https://vulnogram.org/CVE-2020-5428 https://vulnogram.org/CVE-2020-5428 In applications using Spring Cloud Task 2.2.4.RELEASE and below, may be vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer. Medium Wed, 27 Jan 2021 17:30:17 GMT https://vulnogram.org/CVE-2020-5427 https://vulnogram.org/CVE-2020-5427 In Spring Cloud Data Flow, versions 2.6.x prior to 2.6.5, versions 2.5.x prior 2.5.4, an application is vulnerable to SQL injection when requesting task execution. Medium Wed, 27 Jan 2021 17:30:16 GMT https://vulnogram.org/CVE-2020-5423 https://vulnogram.org/CVE-2020-5423 CAPI (Cloud Controller) versions prior to 1.101.0 are vulnerable to a denial-of-service attack in which an unauthenticated malicious attacker can send specially-crafted YAML files to certain endpoints, causing the YAML parser to consume excessive CPU… High Network Exploitable Wed, 02 Dec 2020 01:55:11 GMT https://vulnogram.org/CVE-2020-5426 https://vulnogram.org/CVE-2020-5426 Scheduler for TAS prior to version 1.4.0 was permitting plaintext transmission of UAA client token by sending it over a non-TLS connection. This also depended on the configuration of the MySQL server which is used to cache a UAA client token used by… High Network Exploitable Wed, 11 Nov 2020 17:05:15 GMT https://vulnogram.org/CVE-2020-5425 https://vulnogram.org/CVE-2020-5425 Single Sign-On for Vmware Tanzu all versions prior to 1.11.3 ,1.12.x versions prior to 1.12.4 and 1.13.x prior to 1.13.1 are vulnerable to user impersonation attack.If two users are logged in to the SSO operator dashboard at the same time, with the s… High Sat, 31 Oct 2020 21:45:14 GMT https://vulnogram.org/CVE-2020-5422 https://vulnogram.org/CVE-2020-5422 BOSH System Metrics Server releases prior to 0.1.0 exposed the UAA password as a flag to a process running on the BOSH director. It exposed the password to any user or process with access to the same VM (through ps or looking at process details). Fri, 02 Oct 2020 17:10:12 GMT https://vulnogram.org/CVE-2020-5421 https://vulnogram.org/CVE-2020-5421 In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jses… High Sat, 19 Sep 2020 03:45:13 GMT https://vulnogram.org/CVE-2020-5420 https://vulnogram.org/CVE-2020-5420 Cloud Foundry Routing (Gorouter) versions prior to 0.206.0 allow a malicious developer with "cf push" access to cause denial-of-service to the CF cluster by pushing an app that returns specially crafted HTTP responses that crash the Gorouters. High Thu, 03 Sep 2020 01:10:16 GMT https://vulnogram.org/CVE-2020-5418 https://vulnogram.org/CVE-2020-5418 Cloud Foundry CAPI (Cloud Controller) versions prior to 1.98.0 allow authenticated users having only the "cloud_controller.read" scope, but no roles in any spaces, to list all droplets in all spaces (whereas they should see none). Low Thu, 03 Sep 2020 01:10:15 GMT https://vulnogram.org/CVE-2020-5419 https://vulnogram.org/CVE-2020-5419 RabbitMQ versions 3.8.x prior to 3.8.7 are prone to a Windows-specific binary planting security vulnerability that allows for arbitrary code execution. An attacker with write privileges to the RabbitMQ installation directory and local access on Windo… Medium Mon, 31 Aug 2020 15:05:20 GMT https://vulnogram.org/CVE-2020-5417 https://vulnogram.org/CVE-2020-5417 Cloud Foundry CAPI (Cloud Controller), versions prior to 1.97.0, when used in a deployment where an app domain is also the system domain (which is true in the default CF Deployment manifest), were vulnerable to developers maliciously or accidentally… High Fri, 21 Aug 2020 21:50:14 GMT https://vulnogram.org/CVE-2020-5416 https://vulnogram.org/CVE-2020-5416 Cloud Foundry Routing (Gorouter), versions prior to 0.204.0, when used in a deployment with NGINX reverse proxies in front of the Gorouters, is potentially vulnerable to denial-of-service attacks in which an unauthenticated malicious attacker can sen… High Fri, 21 Aug 2020 21:50:14 GMT https://vulnogram.org/CVE-2020-5415 https://vulnogram.org/CVE-2020-5415 Concourse, versions prior to 6.3.1 and 6.4.1, in installations which use the GitLab auth connector, is vulnerable to identity spoofing by way of configuring a GitLab account with the same full name as another user who is granted access to a Concourse… Critical Network Exploitable Wed, 12 Aug 2020 16:40:14 GMT https://vulnogram.org/CVE-2020-5412 https://vulnogram.org/CVE-2020-5412 Spring Cloud Netflix, versions 2.2.x prior to 2.2.4, versions 2.1.x prior to 2.1.6, and older unsupported versions allow applications to use the Hystrix Dashboard proxy.stream endpoint to make requests to any server reachable by the server hosting th… Fri, 07 Aug 2020 20:45:13 GMT https://vulnogram.org/CVE-2020-5414 https://vulnogram.org/CVE-2020-5414 VMware Tanzu Application Service for VMs (2.7.x versions prior to 2.7.19, 2.8.x versions prior to 2.8.13, and 2.9.x versions prior to 2.9.7) contains an App Autoscaler that logs the UAA admin password. This credential is redacted on VMware Tanzu Oper… Medium Fri, 31 Jul 2020 19:40:20 GMT https://vulnogram.org/CVE-2020-5413 https://vulnogram.org/CVE-2020-5413 Spring Integration framework provides Kryo Codec implementations as an alternative for Java (de)serialization. When Kryo is configured with default options, all unregistered classes are resolved on demand. This leads to the "deserialization gadgets"… Fri, 31 Jul 2020 19:40:19 GMT https://vulnogram.org/CVE-2020-5396 https://vulnogram.org/CVE-2020-5396 VMware GemFire versions prior to 9.10.0, 9.9.2, 9.8.7, and 9.7.6, and VMware Tanzu GemFire for VMs versions prior to 1.11.1 and 1.10.2, when deployed without a SecurityManager, contain a JMX service available which contains an insecure default config… Fri, 31 Jul 2020 19:40:19 GMT https://vulnogram.org/CVE-2019-11286 https://vulnogram.org/CVE-2019-11286 VMware GemFire versions prior to 9.10.0, 9.9.1, 9.8.5, and 9.7.5, and VMware Tanzu GemFire for VMs versions prior to 1.11.0, 1.10.1, 1.9.2, and 1.8.2, contain a JMX service available to the network which does not properly restrict input. A remote aut… Critical Fri, 31 Jul 2020 19:40:19 GMT https://vulnogram.org/CVE-2020-5411 https://vulnogram.org/CVE-2020-5411 When configured to enable default typing, Jackson contained a deserialization vulnerability that could lead to arbitrary code execution. Jackson fixed this vulnerability by blacklisting known "deserialization gadgets". Spring Batch configures Jackson… Thu, 11 Jun 2020 17:00:16 GMT https://vulnogram.org/CVE-2020-5410 https://vulnogram.org/CVE-2020-5410 Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker,… High Known Exploited Network Exploitable Tue, 02 Jun 2020 16:50:12 GMT https://vulnogram.org/CVE-2020-5408 https://vulnogram.org/CVE-2020-5408 Spring Security versions 5.3.x prior to 5.3.2, 5.2.x prior to 5.2.4, 5.1.x prior to 5.1.10, 5.0.x prior to 5.0.16 and 4.2.x prior to 4.2.16 use a fixed null initialization vector with CBC Mode in the implementation of the queryable text encryptor. A… Thu, 14 May 2020 17:15:13 GMT https://vulnogram.org/CVE-2020-5409 https://vulnogram.org/CVE-2020-5409 Pivotal Concourse, most versions prior to 6.0.0, allows redirects to untrusted websites in its login flow. A remote unauthenticated attacker could convince a user to click on a link using the OAuth redirect link with an untrusted website and gain acc… High Network Exploitable Wed, 13 May 2020 23:15:17 GMT https://vulnogram.org/CVE-2020-5407 https://vulnogram.org/CVE-2020-5407 Spring Security versions 5.2.x prior to 5.2.4 and 5.3.x prior to 5.3.2 contain a signature wrapping vulnerability during SAML response validation. When using the spring-security-saml2-service-provider component, a malicious user can carefully modify… Wed, 13 May 2020 17:00:15 GMT https://vulnogram.org/CVE-2020-5406 https://vulnogram.org/CVE-2020-5406 VMware Tanzu Application Service for VMs, 2.6.x versions prior to 2.6.18, 2.7.x versions prior to 2.7.11, and 2.8.x versions prior to 2.8.5, includes a version of PCF Autoscaling that writes database connection properties to its log, including databa… Fri, 10 Apr 2020 18:50:12 GMT https://vulnogram.org/CVE-2020-5405 https://vulnogram.org/CVE-2020-5405 Spring Cloud Config, versions 2.2.x prior to 2.2.2, versions 2.1.x prior to 2.1.7, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker,… Thu, 05 Mar 2020 19:00:19 GMT https://vulnogram.org/CVE-2020-5403 https://vulnogram.org/CVE-2020-5403 Reactor Netty HttpServer, versions 0.9.3 and 0.9.4, is exposed to a URISyntaxException that causes the connection to be closed prematurely instead of producing a 400 response. Medium Network Exploitable Tue, 03 Mar 2020 18:25:14 GMT https://vulnogram.org/CVE-2020-5404 https://vulnogram.org/CVE-2020-5404 The HttpClient from Reactor Netty, versions 0.9.x prior to 0.9.5, and versions 0.8.x prior to 0.8.16, may be used incorrectly, leading to a credentials leak during a redirect to a different domain. In order for this to happen, the HttpClient must hav… Medium Tue, 03 Mar 2020 17:55:13 GMT https://vulnogram.org/CVE-2020-5402 https://vulnogram.org/CVE-2020-5402 In Cloud Foundry UAA, versions prior to 74.14.0, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in the callback function when authenticating with external identity providers. High Network Exploitable Thu, 27 Feb 2020 19:30:24 GMT https://vulnogram.org/CVE-2020-5401 https://vulnogram.org/CVE-2020-5401 Cloud Foundry Routing Release, versions prior to 0.197.0, contains GoRouter, which allows malicious clients to send invalid headers, causing caching layers to reject subsequent legitimate clients trying to access the app. Medium Network Exploitable Thu, 27 Feb 2020 19:30:23 GMT https://vulnogram.org/CVE-2020-5400 https://vulnogram.org/CVE-2020-5400 Cloud Foundry Cloud Controller (CAPI), versions prior to 1.91.0, logs properties of background jobs when they are run, which may include sensitive information such as credentials if provided to the job. A malicious user with access to those logs may… High Thu, 27 Feb 2020 19:30:23 GMT https://vulnogram.org/CVE-2020-5399 https://vulnogram.org/CVE-2020-5399 Cloud Foundry CredHub, versions prior to 2.5.10, connects to a MySQL database without TLS even when configured to use TLS. A malicious user with access to the network between CredHub and its MySQL database may eavesdrop on database connections and th… High Wed, 12 Feb 2020 20:30:17 GMT https://vulnogram.org/CVE-2019-11288 https://vulnogram.org/CVE-2019-11288 In Pivotal tc Server, 3.x versions prior to 3.2.19 and 4.x versions prior to 4.0.10, and Pivotal tc Runtimes, 7.x versions prior to 7.0.99.B, 8.x versions prior to 8.5.47.A, and 9.x versions prior to 9.0.27.A, when a tc Runtime instance is configured… High Mon, 27 Jan 2020 18:50:13 GMT https://vulnogram.org/CVE-2020-5397 https://vulnogram.org/CVE-2020-5397 Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux (spring-webflux module) endpoints. Only non-authenticated endpoints are vul… Medium Network Exploitable Fri, 17 Jan 2020 18:50:12 GMT https://vulnogram.org/CVE-2020-5398 https://vulnogram.org/CVE-2020-5398 In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response… High Thu, 16 Jan 2020 23:55:15 GMT https://vulnogram.org/CVE-2019-11292 https://vulnogram.org/CVE-2019-11292 Pivotal Ops Manager, versions 2.4.x prior to 2.4.27, 2.5.x prior to 2.5.24, 2.6.x prior to 2.6.16, and 2.7.x prior to 2.7.5, logs all query parameters to tomcat’s access file. If the query parameters are used to provide authentication, ie. credential… High Wed, 08 Jan 2020 23:55:12 GMT https://vulnogram.org/CVE-2019-11294 https://vulnogram.org/CVE-2019-11294 Cloud Foundry Cloud Controller API (CAPI), version 1.88.0, allows space developers to list all global service brokers, including service broker URLs and GUIDs, which should only be accessible to admins. Medium Thu, 19 Dec 2019 19:35:11 GMT https://vulnogram.org/CVE-2019-11293 https://vulnogram.org/CVE-2019-11293 Cloud Foundry UAA Release, versions prior to v74.10.0, when set to logging level DEBUG, logs client_secret credentials when sent as a query parameter. A remote authenticated malicious user could gain access to user credentials via the uaa.log file if… High Fri, 06 Dec 2019 20:00:17 GMT https://vulnogram.org/CVE-2019-11290 https://vulnogram.org/CVE-2019-11290 Cloud Foundry UAA Release, versions prior to v74.8.0, logs all query parameters to tomcat’s access file. If the query parameters are used to provide authentication, ie. credentials, then they will be logged as well. High Mon, 25 Nov 2019 23:56:17 GMT https://vulnogram.org/CVE-2019-11287 https://vulnogram.org/CVE-2019-11287 Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is vulnerable to a denial of servi… Medium Fri, 22 Nov 2019 23:26:08 GMT https://vulnogram.org/CVE-2019-11291 https://vulnogram.org/CVE-2019-11291 Pivotal RabbitMQ, 3.7 versions prior to v3.7.20 and 3.8 version prior to v3.8.1, and RabbitMQ for PCF, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain two endpoints, federation and shovel, which do not properly sanitize u… Low Fri, 22 Nov 2019 22:56:08 GMT https://vulnogram.org/CVE-2019-11289 https://vulnogram.org/CVE-2019-11289 Cloud Foundry Routing, all versions before 0.193.0, does not properly validate nonce input. A remote unauthenticated malicious user could forge an HTTP route service request using an invalid nonce that will cause the Gorouter to crash. High Network Exploitable Tue, 19 Nov 2019 18:41:04 GMT https://vulnogram.org/CVE-2019-11283 https://vulnogram.org/CVE-2019-11283 Cloud Foundry SMB Volume, versions prior to v2.0.3, accidentally outputs sensitive information to the logs. A remote user with access to the SMB Volume logs can discover the username and password for volumes that have been recently created, allowing… High Wed, 23 Oct 2019 15:32:22 GMT https://vulnogram.org/CVE-2019-11282 https://vulnogram.org/CVE-2019-11282 Cloud Foundry UAA, versions prior to v74.3.0, contains an endpoint that is vulnerable to SCIM injection attack. A remote authenticated malicious user with scim.invite scope can craft a request with malicious content which can leak information about u… Medium Wed, 23 Oct 2019 15:28:24 GMT https://vulnogram.org/CVE-2019-11284 https://vulnogram.org/CVE-2019-11284 Pivotal Reactor Netty, versions prior to 0.8.11, passes headers through redirects, including authorization ones. A remote unauthenticated malicious user may gain access to credentials for a different server than they have access to. Medium Network Exploitable Thu, 17 Oct 2019 17:40:12 GMT https://vulnogram.org/CVE-2019-11281 https://vulnogram.org/CVE-2019-11281 Pivotal RabbitMQ, versions prior to v3.7.18, and RabbitMQ for PCF, versions 1.15.x prior to 1.15.13, versions 1.16.x prior to 1.16.6, and versions 1.17.x prior to 1.17.3, contain two components, the virtual host limits page, and the federation manage… Low Wed, 16 Oct 2019 15:23:47 GMT https://vulnogram.org/CVE-2019-11275 https://vulnogram.org/CVE-2019-11275 Pivotal Application Manager, versions 666.0.x prior to 666.0.36, versions 667.0.x prior to 667.0.22, versions 668.0.x prior to 668.0.21, versions 669.0.x prior to 669.0.13, and versions 670.0.x prior to 670.0.7, contain a vulnerability where a remote… Low Tue, 01 Oct 2019 14:17:40 GMT https://vulnogram.org/CVE-2019-11279 https://vulnogram.org/CVE-2019-11279 CF UAA versions prior to 74.1.0 can request scopes for a client that shouldn't be allowed by submitting an array of requested scopes. A remote malicious user can escalate their own privileges to any scope, allowing them to take control of UAA and the… High Thu, 26 Sep 2019 21:15:10 GMT https://vulnogram.org/CVE-2019-11278 https://vulnogram.org/CVE-2019-11278 CF UAA versions prior to 74.1.0, allow external input to be directly queried against. A remote malicious user with 'client.write' and 'groups.update' can craft a SCIM query, which leaks information that allows an escalation of privileges, ultimately… High Thu, 26 Sep 2019 21:11:24 GMT https://vulnogram.org/CVE-2019-11277 https://vulnogram.org/CVE-2019-11277 Cloud Foundry NFS Volume Service, 1.7.x versions prior to 1.7.11 and 2.x versions prior to 2.3.0, is vulnerable to LDAP injection. A remote authenticated malicious space developer can potentially inject LDAP filters via service instance creation, fac… High Mon, 23 Sep 2019 17:40:18 GMT https://vulnogram.org/CVE-2019-11280 https://vulnogram.org/CVE-2019-11280 Pivotal Apps Manager, included in Pivotal Application Service versions 2.3.x prior to 2.3.18, 2.4.x prior to 2.4.14, 2.5.x prior to 2.5.10, and 2.6.x prior to 2.6.5, contains an invitations microservice which allows users to invite others to their or… High Fri, 20 Sep 2019 18:35:17 GMT