| Package | Affected versions | Patched versions |
|---|---|---|
| apps manager | ≥ 666.0.0, < 666.0.36≥ 667.0.0, < 667.0.22≥ 668.0.0, < 668.0.21≥ 669.0.0, < 669.0.13≥ 670.0.0, < 670.0.7 | 666.0.36667.0.22668.0.21669.0.13670.0.7 |
| pivotal application service | ≥ 2.3.0, ≤ 2.3.18≥ 2.4.0, ≤ 2.4.14≥ 2.5.0, ≤ 2.5.1≥ 2.6.0, ≤ 2.6.5 |
Pivotal Application Manager, versions 666.0.x prior to 666.0.36, versions 667.0.x prior to 667.0.22, versions 668.0.x prior to 668.0.21, versions 669.0.x prior to 669.0.13, and versions 670.0.x prior to 670.0.7, contain a vulnerability where a remote authenticated user can create an app with a name such that a csv program can interpret into a formula and gets executed. The malicious user can possibly gain access to a usage report that requires a higher privilege.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free