| Package | Affected versions | Patched versions |
|---|---|---|
| operations manager | = 1.6.0= 1.6.1= 1.6.2= 1.6.3= 1.6.4= 1.6.5= 1.6.6= 1.6.7= 1.6.8≤ 1.5.13 |
Pivotal Cloud Foundry (PCF) Ops Manager before 1.5.14 and 1.6.x before 1.6.9 uses the same cookie-encryption key across different customers' installations, which allows remote attackers to bypass session authentication by leveraging knowledge of this key from another installation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free