CVE-2018-11046 — Improper Input Validation in Operations Manager

CWE-20 — Improper Input Validation3 documents3 sources
Severity
6.5MEDIUMNVD
EPSS
0.3%
top 43.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Pivotal Operations ManagerPivotal Software Operations Manager
Timeline
PublishedJun 25
Latest updateMay 14

Description

Pivotal Operations Manager, versions 2.1.x prior to 2.1.6 and version 2.0.14, includes NGINX packages that lacks security vulnerability patches. An attacker with access to the NGINX processes and knowledge of how to exploit the unpatched vulnerabilities may be able to impact Operations Manager

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5pivotal/operations_manager2.1.x — 2.1.6+1

🔴Vulnerability Details

2
GHSA
GHSA-67gc-hxqg-339g: Pivotal Operations Manager, versions 2↗2022-05-14
▶
CVEList
CVE-2018-11046: Pivotal Operations Manager, versions 2↗2018-06-25
▶
CVE-2018-11046 — Improper Input Validation | cvebase