CVE-2018-11086: High severity pivotal application service vulnerability
Pivotal Usage Service in Pivotal Application Service, versions 2.0 prior to 2.0.21 and 2.1 prior to 2.1.13 and 2.2 prior to 2.2.5, contains a bug which may allow escalation of privileges. A space developer with access to the system org may be able to access an artifact which contains the CF admin credential, allowing them to escalate to an admin role.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-11086?
CVE-2018-11086 is a vulnerability in Pivotal Usage Service in Pivotal Application Service that may allow escalation of privileges.
Which versions of Pivotal Application Service are affected by CVE-2018-11086?
Pivotal Application Service versions 2.0 prior to 2.0.21, 2.1 prior to 2.1.13, and 2.2 prior to 2.2.5 are affected.
What is the severity of CVE-2018-11086?
CVE-2018-11086 has a severity rating of 8.8, which is considered high.
How can an attacker exploit CVE-2018-11086?
An attacker with access to the system org and space developer privileges may be able to access an artifact containing the CF admin credentials.
Is there a fix for CVE-2018-11086?
Yes, updating Pivotal Application Service to version 2.0.21, 2.1.13, or 2.2.5 will fix the vulnerability.