| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| apps manager | ≥ 666.0.0, < 666.0.36≥ 667.0.0, < 667.0.22≥ 668.0.0, < 668.0.21≥ 669.0.0, < 669.0.13≥ 670.0.0, < 670.0.7 | 666.0.36667.0.22668.0.21669.0.13670.0.7 |
| pivotal application service | ≥ 2.3.0, ≤ 2.3.18≥ 2.4.0, ≤ 2.4.14≥ 2.5.0, ≤ 2.5.1≥ 2.6.0, ≤ 2.6.5 |
Pivotal Application Manager, versions 666.0.x prior to 666.0.36, versions 667.0.x prior to 667.0.22, versions 668.0.x prior to 668.0.21, versions 669.0.x prior to 669.0.13, and versions 670.0.x prior to 670.0.7, contain a vulnerability where a remote authenticated user can create an app with a name such that a csv program can interpret into a formula and gets executed. The malicious user can possibly gain access to a usage report that requires a higher privilege.
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン