| Package | Affected versions | Patched versions |
|---|---|---|
| operations manager | ≥ 2.0.0, < 2.0.24≥ 2.1.0, < 2.1.15≥ 2.2.0, < 2.2.7≥ 2.3.0, < 2.3.1 | 2.0.242.1.152.2.72.3.1 |
Pivotal Operations Manager, versions 2.0.x prior to 2.0.24, versions 2.1.x prior to 2.1.15, versions 2.2.x prior to 2.2.7, and versions 2.3.x prior to 2.3.1, grants all users a scope which allows for privilege escalation. A remote malicious user who has been authenticated may create a new client with administrator privileges for Opsman.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free