CVE-2019-3793
Pivotal Apps Manager Release, versions 665.0.x prior to 665.0.28, versions 666.0.x prior to 666.0.21, versions 667.0.x prior to 667.0.7, contain an invitation service that accepts HTTP. A remote unauthenticated user could listen to network traffic and gain access to the authorization credentials used to make the invitation requests.
| Software | From | Fixed in |
|---|---|---|
| pivotal_software / application_service | 667.0.0 | 667.0.7 |
| pivotal_software / application_service | 666.0.0 | 666.0.21 |
| pivotal_software / application_service | 665.0.0 | 665.0.28 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime