EUVD-2018-3125

Malware in sbrugna...

CVE-2018-11081

CVE-2018-11081 affects Pivotal Operations Manager: versions 2.2.x before 2.2.1, 2.1.x before 2.1.11, 2.0.x before 2.0.16, and 1.11.x before 2. The flaw is that the UAA config is not written to the temp RAM disk, exposing UAA credentials on disk. Impact: a remote user with access to the VM can sea...

CVE-2018-11081 Pivotal Operations Manager UAA config - temp Ram Disk

Pivotal Operations Manager, versions 2.2.x prior to 2.2.1, 2.1.x prior to 2.1.11, 2.0.x prior to 2.0.16, and 1.11.x prior to 2, fails to write the Operations Manager UAA config onto the temp RAM disk, thus exposing the configs directly onto disk. A remote user that has gained access to the...