CVEvulnerability

CVE-2018-11046

6.5 MEDIUM Published 2018-06-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-06-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
Weaknesses
CWE-20

Description

Pivotal Operations Manager, versions 2.1.x prior to 2.1.6 and version 2.0.14, includes NGINX packages that lacks security vulnerability patches. An attacker with access to the NGINX processes and knowledge of how to exploit the unpatched vulnerabilities may be able to impact Operations Manager

Affected configurations

• pivotal software operations manager (>= 2.1.0 < 2.1.6) • pivotal software operations manager 2.0.14

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References