CVE-2018-11086 is a vulnerability in Pivotal Software Pivotal Application Service
Published on September 17, 2018
Pivotal Usage Service in Pivotal Application Service, versions 2.0 prior to 2.0.21 and 2.1 prior to 2.1.13 and 2.2 prior to 2.2.5, contains a bug which may allow escalation of privileges. A space developer with access to the system org may be able to access an artifact which contains the CF admin credential, allowing them to escalate to an admin role.
Products Associated with CVE-2018-11086
Want to know whenever a new CVE is published for Pivotal Software Pivotal Application Service? stack.watch will email you.
Affected Versions
Pivotal Application Service:- Version 2.0 and below 2.0.21 is affected.
- Version 2.1 and below 2.1.13 is affected.
- Version 2.2 and below 2.2.5 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.