CVE-2018-11088: High severity pivotal application service vulnerability
Pivotal Applications Manager in Pivotal Application Service, versions 2.0 prior to 2.0.21 and 2.1 prior to 2.1.13 and 2.2 prior to 2.2.5, contains a bug which may allow escalation of privileges. A space developer with access to the system org may be able to access an artifact which contains the CF admin credential, allowing them to escalate to an admin role.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-11088?
CVE-2018-11088 is a vulnerability in Pivotal Applications Manager in Pivotal Application Service that may allow escalation of privileges.
What versions of Pivotal Application Service are affected by CVE-2018-11088?
Pivotal Application Service versions 2.0 prior to 2.0.21, 2.1 prior to 2.1.13, and 2.2 prior to 2.2.5 are affected.
What is the severity of CVE-2018-11088?
CVE-2018-11088 has a severity rating of 8.8 (High).
How can an attacker exploit CVE-2018-11088?
An attacker with access to the system org may be able to exploit this vulnerability to access an artifact containing the CF a...
Is there a fix available for CVE-2018-11088?
Yes, Pivotal has released fixes for this vulnerability. Please refer to the official reference for more details.