CVE-2019-12116: Missing Authentication for Critical Function

An issue was discovered in ONAP SDC through Dublin. By accessing port 6000 of demo-sdc-sdc-fe pod, an unauthenticated attacker who already has access to pod-to-pod communication may execute arbitrary code inside that pod. All ONAP Operations Manager OOM setups are affected...

PT-2020-9282

Name of the Vulnerable Software and Affected Versions ONAP SDC versions through Dublin ONAP Operations Manager OOM setups affected versions not specified Description An issue was discovered in ONAP SDC, allowing an unauthenticated attacker with access to pod-to-pod communication to execute...

Pivotal Software Pivotal Operations Manager Cross-Site Scripting Vulnerability

Pivotal Software Pivotal Operations Manager is a Cloud Foundry automated management solution from Pivotal Software, USA. The solution automates the deployment, upgrade and management of the Cloud Foundry platform. A cross-site scripting vulnerability exists in Pivotal Software Pivotal Operations...

CVE-2019-3776 Reflected XSS in Pivotal Operations Manager

Pivotal Operations Manager, 2.1.x versions prior to 2.1.20, 2.2.x versions prior to 2.2.16, 2.3.x versions prior to 2.3.10, 2.4.x versions prior to 2.4.3, contains a reflected cross site scripting vulnerability. A remote user that is able to convince an Operations Manager user to interact with...

CVE-2019-3776

Vulnerability summary (CVE-2019-3776) : Pivotal Operations Manager is affected by a reflected cross-site scripting vulnerability in several versions (2.1.x before 2.1.20, 2.2.x before 2.2.16, 2.3.x before 2.3.10, 2.4.x before 2.4.3). Impact (as described) : A remote attacker who can lure a user t...

CVE-2019-3776

Pivotal Operations Manager, 2.1.x versions prior to 2.1.20, 2.2.x versions prior to 2.2.16, 2.3.x versions prior to 2.3.10, 2.4.x versions prior to 2.4.3, contains a reflected cross site scripting vulnerability. A remote user that is able to convince an Operations Manager user to interact with...

Cross site scripting

Pivotal Operations Manager, 2.1.x versions prior to 2.1.20, 2.2.x versions prior to 2.2.16, 2.3.x versions prior to 2.3.10, 2.4.x versions prior to 2.4.3, contains a reflected cross site scripting vulnerability. A remote user that is able to convince an Operations Manager user to interact with...

CVE-2019-3776

Pivotal Operations Manager, 2.1.x versions prior to 2.1.20, 2.2.x versions prior to 2.2.16, 2.3.x versions prior to 2.3.10, 2.4.x versions prior to 2.4.3, contains a reflected cross site scripting vulnerability. A remote user that is able to convince an Operations Manager user to interact with...

CVE-2019-3776: Improper Neutralization of Input During Web Page Generation

Pivotal Operations Manager, 2.1.x versions prior to 2.1.20, 2.2.x versions prior to 2.2.16, 2.3.x versions prior to 2.3.10, 2.4.x versions prior to 2.4.3, contains a reflected cross site scripting vulnerability. A remote user that is able to convince an Operations Manager user to interact with...

PT-2019-16707

Name of the Vulnerable Software and Affected Versions Pivotal Operations Manager versions 2.1.x prior to 2.1.20 Pivotal Operations Manager versions 2.2.x prior to 2.2.16 Pivotal Operations Manager versions 2.3.x prior to 2.3.10 Pivotal Operations Manager versions 2.4.x prior to 2.4.3 Description...

SolarWinds Network Operations Manager Detection (Windows SMB Login)

This script detects the installed version of SolarWinds Network Operations Manager for Windows. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

How to Collect Logs for Veeam Management Pack for Microsoft System Center

Purpose This article documents how to collect logs for Veeam Management Pack for Microsoft System Center. Solution For VMware Infrastructure To investigate issues associated with a VMware Infrastructure, logs should be collected from both Veeam Management Pack for Microsoft System Center and the...

Pivotal Operations Manager Elevation of Privilege Vulnerability

Pivotal Operations Manager is a Cloud Foundry automated management solution from Pivotal Software, USA. The solution automates the deployment, upgrade and management of the Cloud Foundry platform. An elevation of privilege vulnerability exists in Pivotal Operations Manager. A remote attacker can...

CVE-2018-15762

Pivotal Operations Manager, versions 2.0.x prior to 2.0.24, versions 2.1.x prior to 2.1.15, versions 2.2.x prior to 2.2.7, and versions 2.3.x prior to 2.3.1, grants all users a scope which allows for privilege escalation. A remote malicious user who has been authenticated may create a new client...

Privilege escalation

Pivotal Operations Manager, versions 2.0.x prior to 2.0.24, versions 2.1.x prior to 2.1.15, versions 2.2.x prior to 2.2.7, and versions 2.3.x prior to 2.3.1, grants all users a scope which allows for privilege escalation. A remote malicious user who has been authenticated may create a new client...

CVE-2018-15762

Pivotal Operations Manager, versions 2.0.x prior to 2.0.24, versions 2.1.x prior to 2.1.15, versions 2.2.x prior to 2.2.7, and versions 2.3.x prior to 2.3.1, grants all users a scope which allows for privilege escalation. A remote malicious user who has been authenticated may create a new client...

CVE-2018-15762 Pivotal Operations Manager gives all users heightened privileges

Pivotal Operations Manager, versions 2.0.x prior to 2.0.24, versions 2.1.x prior to 2.1.15, versions 2.2.x prior to 2.2.7, and versions 2.3.x prior to 2.3.1, grants all users a scope which allows for privilege escalation. A remote malicious user who has been authenticated may create a new client...

CVE-2018-15762

CVE-2018-15762 affects Pivotal Operations Manager. Versions 2.0.x before 2.0.24, 2.1.x before 2.1.15, 2.2.x before 2.2.7, and 2.3.x before 2.3.1 permit an authenticated remote user to create a new client with administrator privileges, effectively granting elevated privileges. The connected docume...

CVE-2018-15762: Improper Privilege Management

Pivotal Operations Manager, versions 2.0.x prior to 2.0.24, versions 2.1.x prior to 2.1.15, versions 2.2.x prior to 2.2.7, and versions 2.3.x prior to 2.3.1, grants all users a scope which allows for privilege escalation. A remote malicious user who has been authenticated may create a new client...

PT-2018-13188

Name of the Vulnerable Software and Affected Versions Pivotal Operations Manager versions 2.0.x through 2.0.23 Pivotal Operations Manager versions 2.1.x through 2.1.14 Pivotal Operations Manager versions 2.2.x through 2.2.6 Pivotal Operations Manager versions 2.3.x through 2.3.0 Description The...