CVE-2019-3793

🗓️ 24 Apr 2019 15:21:10Reported by dellType

Pivotal Apps Manager Release, versions 665.0.x prior to 665.0.28, versions 666.0.x prior to 666.0.21, versions 667.0.x prior to 667.0.7, contain an invitation service that accepts HTTP. A remote unauthenticated user could listen to network traffic and gain access to authorization credentials

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2019-3793 Invitations Service supports HTTP connections	24 Apr 201915:21	–	cvelist
EUVD	EUVD-2019-13423	7 Oct 202500:30	–	euvd
NVD	CVE-2019-3793	24 Apr 201916:29	–	nvd
OSV	CVE-2019-3793	24 Apr 201916:29	–	osv
Prion	Authorization	24 Apr 201916:29	–	prion

NVD

Vulners

Node

pivotal_software application_serviceRange665.0.0–665.0.28

pivotal_software application_serviceRange666.0.0–666.0.21

pivotal_software application_serviceRange667.0.0–667.0.7

[
  {
    "product": "Apps Manager",
    "vendor": "Pivotal",
    "versions": [
      {
        "lessThan": "666.0.21",
        "status": "affected",
        "version": "666",
        "versionType": "custom"
      },
      {
        "lessThan": "667.0.7",
        "status": "affected",
        "version": "667",
        "versionType": "custom"
      },
      {
        "lessThan": "665.0.28",
        "status": "affected",
        "version": "665",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
pivotal	www.pivotal.io/security/cve-2019-3793

21 Nov 2024 04:42Current

9.1High risk

Vulners AI Score9.1

CVSS 25

CVSS 3.19.8

CVSS 38.1

EPSS0.0025