CVE-2018-15762 is a vulnerability in Pivotal Software Operations Manager
Published on November 2, 2018
Pivotal Operations Manager gives all users heightened privileges
Pivotal Operations Manager, versions 2.0.x prior to 2.0.24, versions 2.1.x prior to 2.1.15, versions 2.2.x prior to 2.2.7, and versions 2.3.x prior to 2.3.1, grants all users a scope which allows for privilege escalation. A remote malicious user who has been authenticated may create a new client with administrator privileges for Opsman.
Products Associated with CVE-2018-15762
Want to know whenever a new CVE is published for Pivotal Software Operations Manager? stack.watch will email you.
Affected Versions
Pivotal Cloud Foundry Pivotal Operations Manager:- Version 2.0.x and below 2.0.24 is affected.
- Version 2.1.x and below 2.1.15 is affected.
- Version 2.2.x and below 2.2.7 is affected.
- Version 2.3.x and below 2.3.1 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.