CVE-2018-15762
Pivotal Operations Manager, versions 2.0.x prior to 2.0.24, versions 2.1.x prior to 2.1.15, versions 2.2.x prior to 2.2.7, and versions 2.3.x prior to 2.3.1, grants all users a scope which allows for privilege escalation. A remote malicious user who has been authenticated may create a new client with administrator privileges for Opsman.
| Software | From | Fixed in |
|---|---|---|
| pivotal_software / operations_manager | 2.0.0 | 2.0.24 |
| pivotal_software / operations_manager | 2.1.0 | 2.1.15 |
| pivotal_software / operations_manager | 2.2.0 | 2.2.7 |
| pivotal_software / operations_manager | 2.3.0 | 2.3.1 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime