CVE-2018-11046

Published: Jun 25, 2018Modified: Nov 21, 2024

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Pivotal Operations Manager, versions 2.1.x prior to 2.1.6 and version 2.0.14, includes NGINX packages that lacks security vulnerability patches. An attacker with access to the NGINX processes and knowledge of how to exploit the unpatched vulnerabilities may be able to impact Operations Manager

Affected (2)

Products: Pivotal Software: Operations Manager

Pivotal Software

1 product

Operations Manager

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Pivotal Software Operations Manager	From 2.1.0 to 2.1.6
Pivotal Software Operations Manager	Version 2.0.14

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

http://www.securityfocus.com/bid/104545

Source: security_alert@emc.com

Third Party AdvisoryVDB Entry

https://pivotal.io/security/cve-2018-11046

Source: security_alert@emc.com

MitigationVendor Advisory

http://www.securityfocus.com/bid/104545

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://pivotal.io/security/cve-2018-11046

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationVendor Advisory

Timeline

No history available yet.