CVE-2016-0897 Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.17 and 1.7.x before 1.7.8, when vCloud or vSphere is used, does not properly enable SSH access for operators, which has unspecified impact and remote...
CriticalCVSS 9.8
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.17 and 1.7.x before 1.7.8, when vCloud or vSphere is used, does not properly enable SSH access for operators, which has unspecified impact and remote attack vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pivotal software operations manager | <= 1.6.16 | No fix listed |
| pivotal software operations manager | = 1.7.0 | No fix listed |
| pivotal software operations manager | = 1.7.1 | No fix listed |
| pivotal software operations manager | = 1.7.2 | No fix listed |
| pivotal software operations manager | = 1.7.3 | No fix listed |
| pivotal software operations manager | = 1.7.4 | No fix listed |
| pivotal software operations manager | = 1.7.5 | No fix listed |
| pivotal software operations manager | = 1.7.6 | No fix listed |
| pivotal software operations manager | = 1.7.7 | No fix listed |
References
- pivotal.io vendor-advisory