CVE-2016-0930

Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.19 and 1.7.x before 1.7.10, when vCloud or vSphere is used, has a default password for compilation VMs, which allows remote attackers to obtain SSH access by connecting within an installation-time period during which these VMs exist.

Score

CVSS 3.0 9.8 Critical

Status

Modified - security_alert@emc.com

Published

2016-09-18

Last modified

2024-08-05

Weaknesses

CWE-362

Affected products

• Operations Manager (Pivotal)

References

• http://www.securityfocus.com/bid/93027
• https://pivotal.io/security/cve-2016-0930