EUVD-2016-7560

Malware in sbrugna...

CVE-2016-0883

Pivotal Cloud Foundry PCF Ops Manager before 1.5.14 and 1.6.x before 1.6.9 uses the same cookie-encryption key across different customers' installations, which allows remote attackers to bypass session authentication by leveraging knowledge of this key from another installation...

CVE-2016-0927

The CVE-2016-0927 issue affects Pivotal Cloud Foundry (PCF) Ops Manager, specifically versions before 1.6.17. Descriptions across multiple sources identify a cross-site scripting (XSS) or HTML injection vulnerability that allows remote attackers to inject arbitrary scripts or HTML via unspecified...

CVE-2016-0883

CVE-2016-0883 affects Pivotal Cloud Foundry Ops Manager prior to 1.5.14 and 1.6.x prior to 1.6.9. The issue is that the same cookie-encryption key was used across different customers’ installations, enabling remote attackers to bypass session authentication by leveraging knowledge of the key from...

PT-2016-4483

Name of the Vulnerable Software and Affected Versions Pivotal Cloud Foundry PCF Ops Manager versions 1.6.0 through 1.6.18 Pivotal Cloud Foundry PCF Ops Manager versions 1.7.0 through 1.7.9 Description The issue allows remote attackers to obtain SSH access to compilation VMs by connecting within a...

CVE-2016-0930: Concurrent Execution using Shared Resource with Improper Synchronization

Pivotal Cloud Foundry PCF Ops Manager before 1.6.19 and 1.7.x before 1.7.10, when vCloud or vSphere is used, has a default password for compilation VMs, which allows remote attackers to obtain SSH access by connecting within an installation-time period during which these VMs exist...

PT-2016-4452

Name of the Vulnerable Software and Affected Versions Pivotal Cloud Foundry PCF Ops Manager versions 1.6.x through 1.6.16 Pivotal Cloud Foundry PCF Ops Manager versions 1.7.x through 1.7.7 Description The issue affects Pivotal Cloud Foundry PCF Ops Manager when used with vCloud or vSphere, and it...

CVE-2016-0897: Undefined Security Weakness

Pivotal Cloud Foundry PCF Ops Manager before 1.6.17 and 1.7.x before 1.7.8, when vCloud or vSphere is used, does not properly enable SSH access for operators, which has unspecified impact and remote attack vectors...

PT-2016-4442

Name of the Vulnerable Software and Affected Versions Pivotal Cloud Foundry PCF Ops Manager versions prior to 1.5.14 Pivotal Cloud Foundry PCF Ops Manager versions 1.6.x prior to 1.6.9 Description The issue allows remote attackers to bypass session authentication by leveraging knowledge of the...

CVE-2016-0883: Improper Authentication

Pivotal Cloud Foundry PCF Ops Manager before 1.5.14 and 1.6.x before 1.6.9 uses the same cookie-encryption key across different customers' installations, which allows remote attackers to bypass session authentication by leveraging knowledge of this key from another installation...