EUVD-2019-2968

Malware in sbrugna...

Design/Logic Flaw

Pivotal Apps Manager, included in Pivotal Application Service versions 2.3.x prior to 2.3.18, 2.4.x prior to 2.4.14, 2.5.x prior to 2.5.10, and 2.6.x prior to 2.6.5, contains an invitations microservice which allows users to invite others to their organizations. A remote authenticated user can ga...

CVE-2019-11280

CVE-2019-11280 affects Pivotal Apps Manager, included in Pivotal Application Service versions 2.3.x before 2.3.18, 2.4.x before 2.4.14, 2.5.x before 2.5.10, and 2.6.x before 2.6.5. The vulnerability is described as a privilege-escalation issue in the invitations microservice, where a remote authe...

PT-2019-12227

Name of the Vulnerable Software and Affected Versions Pivotal Application Service versions 2.3.x through 2.3.17 Pivotal Application Service versions 2.4.x through 2.4.13 Pivotal Application Service versions 2.5.x through 2.5.9 Pivotal Application Service versions 2.6.x through 2.6.4 Description T...

CVE-2019-11280: Improper Privilege Management

Pivotal Apps Manager, included in Pivotal Application Service versions 2.3.x prior to 2.3.18, 2.4.x prior to 2.4.14, 2.5.x prior to 2.5.10, and 2.6.x prior to 2.6.5, contains an invitations microservice which allows users to invite others to their organizations. A remote authenticated user can ga...