CVE-2019-3777: Improper Certificate Validation

Pivotal Application Service PAS, versions 2.2.x prior to 2.2.12, 2.3.x prior to 2.3.7 and 2.4.x prior to 2.4.3, contain apps manager that uses a cloud controller proxy that fails to verify SSL certs. A remote unauthenticated attacker that could hijack the Cloud Controller's DNS record could...

PT-2019-16708

Name of the Vulnerable Software and Affected Versions Pivotal Application Service PAS versions 2.2.x through 2.2.11 Pivotal Application Service PAS versions 2.3.x through 2.3.6 Pivotal Application Service PAS versions 2.4.x through 2.4.2 Description The issue concerns a failure to verify SSL...