CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-11292

Pivotal Ops Manager, versions 2.4.x prior to 2.4.27, 2.5.x prior to 2.5.24, 2.6.x prior to 2.6.16, and 2.7.x prior to 2.7.5, logs all query parameters to tomcat’s access file. If the query parameters are used to provide authentication, ie. credentials, then they will be logged as well.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 64.3%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 4.0

References

Products affected by CVE-2019-11292

Pivotal Software » Operations Manager » Version: 2.4.0

cpe:2.3:a:pivotal_software:operations_manager:2.4.0
Pivotal Software » Operations Manager » Version: 2.4.1

cpe:2.3:a:pivotal_software:operations_manager:2.4.1
Pivotal Software » Operations Manager » Version: 2.4.10

cpe:2.3:a:pivotal_software:operations_manager:2.4.10
Pivotal Software » Operations Manager » Version: 2.4.11

cpe:2.3:a:pivotal_software:operations_manager:2.4.11
Pivotal Software » Operations Manager » Version: 2.4.12

cpe:2.3:a:pivotal_software:operations_manager:2.4.12
Pivotal Software » Operations Manager » Version: 2.4.13

cpe:2.3:a:pivotal_software:operations_manager:2.4.13
Pivotal Software » Operations Manager » Version: 2.4.14

cpe:2.3:a:pivotal_software:operations_manager:2.4.14
Pivotal Software » Operations Manager » Version: 2.4.15

cpe:2.3:a:pivotal_software:operations_manager:2.4.15
Pivotal Software » Operations Manager » Version: 2.4.16

cpe:2.3:a:pivotal_software:operations_manager:2.4.16
Pivotal Software » Operations Manager » Version: 2.4.17

cpe:2.3:a:pivotal_software:operations_manager:2.4.17
Pivotal Software » Operations Manager » Version: 2.4.18

cpe:2.3:a:pivotal_software:operations_manager:2.4.18
Pivotal Software » Operations Manager » Version: 2.4.19

cpe:2.3:a:pivotal_software:operations_manager:2.4.19
Pivotal Software » Operations Manager » Version: 2.4.2

cpe:2.3:a:pivotal_software:operations_manager:2.4.2
Pivotal Software » Operations Manager » Version: 2.4.20

cpe:2.3:a:pivotal_software:operations_manager:2.4.20
Pivotal Software » Operations Manager » Version: 2.4.21

cpe:2.3:a:pivotal_software:operations_manager:2.4.21
Pivotal Software » Operations Manager » Version: 2.4.22

cpe:2.3:a:pivotal_software:operations_manager:2.4.22
Pivotal Software » Operations Manager » Version: 2.4.23

cpe:2.3:a:pivotal_software:operations_manager:2.4.23
Pivotal Software » Operations Manager » Version: 2.4.24

cpe:2.3:a:pivotal_software:operations_manager:2.4.24
Pivotal Software » Operations Manager » Version: 2.4.25

cpe:2.3:a:pivotal_software:operations_manager:2.4.25
Pivotal Software » Operations Manager » Version: 2.4.26

cpe:2.3:a:pivotal_software:operations_manager:2.4.26
Pivotal Software » Operations Manager » Version: 2.4.3

cpe:2.3:a:pivotal_software:operations_manager:2.4.3
Pivotal Software » Operations Manager » Version: 2.4.4

cpe:2.3:a:pivotal_software:operations_manager:2.4.4
Pivotal Software » Operations Manager » Version: 2.4.5

cpe:2.3:a:pivotal_software:operations_manager:2.4.5
Pivotal Software » Operations Manager » Version: 2.4.6

cpe:2.3:a:pivotal_software:operations_manager:2.4.6
Pivotal Software » Operations Manager » Version: 2.4.7

cpe:2.3:a:pivotal_software:operations_manager:2.4.7
Pivotal Software » Operations Manager » Version: 2.4.8

cpe:2.3:a:pivotal_software:operations_manager:2.4.8
Pivotal Software » Operations Manager » Version: 2.4.9

cpe:2.3:a:pivotal_software:operations_manager:2.4.9
Pivotal Software » Operations Manager » Version: 2.5.0

cpe:2.3:a:pivotal_software:operations_manager:2.5.0
Pivotal Software » Operations Manager » Version: 2.5.1

cpe:2.3:a:pivotal_software:operations_manager:2.5.1
Pivotal Software » Operations Manager » Version: 2.5.10

cpe:2.3:a:pivotal_software:operations_manager:2.5.10
Pivotal Software » Operations Manager » Version: 2.5.11

cpe:2.3:a:pivotal_software:operations_manager:2.5.11
Pivotal Software » Operations Manager » Version: 2.5.12

cpe:2.3:a:pivotal_software:operations_manager:2.5.12
Pivotal Software » Operations Manager » Version: 2.5.13

cpe:2.3:a:pivotal_software:operations_manager:2.5.13
Pivotal Software » Operations Manager » Version: 2.5.14

cpe:2.3:a:pivotal_software:operations_manager:2.5.14
Pivotal Software » Operations Manager » Version: 2.5.15

cpe:2.3:a:pivotal_software:operations_manager:2.5.15
Pivotal Software » Operations Manager » Version: 2.5.16

cpe:2.3:a:pivotal_software:operations_manager:2.5.16
Pivotal Software » Operations Manager » Version: 2.5.17

cpe:2.3:a:pivotal_software:operations_manager:2.5.17
Pivotal Software » Operations Manager » Version: 2.5.19

cpe:2.3:a:pivotal_software:operations_manager:2.5.19
Pivotal Software » Operations Manager » Version: 2.5.2

cpe:2.3:a:pivotal_software:operations_manager:2.5.2
Pivotal Software » Operations Manager » Version: 2.5.20

cpe:2.3:a:pivotal_software:operations_manager:2.5.20
Pivotal Software » Operations Manager » Version: 2.5.21

cpe:2.3:a:pivotal_software:operations_manager:2.5.21
Pivotal Software » Operations Manager » Version: 2.5.22

cpe:2.3:a:pivotal_software:operations_manager:2.5.22
Pivotal Software » Operations Manager » Version: 2.5.23

cpe:2.3:a:pivotal_software:operations_manager:2.5.23
Pivotal Software » Operations Manager » Version: 2.5.3

cpe:2.3:a:pivotal_software:operations_manager:2.5.3
Pivotal Software » Operations Manager » Version: 2.5.4

cpe:2.3:a:pivotal_software:operations_manager:2.5.4
Pivotal Software » Operations Manager » Version: 2.5.5

cpe:2.3:a:pivotal_software:operations_manager:2.5.5
Pivotal Software » Operations Manager » Version: 2.5.6

cpe:2.3:a:pivotal_software:operations_manager:2.5.6
Pivotal Software » Operations Manager » Version: 2.5.7

cpe:2.3:a:pivotal_software:operations_manager:2.5.7
Pivotal Software » Operations Manager » Version: 2.5.8

cpe:2.3:a:pivotal_software:operations_manager:2.5.8
Pivotal Software » Operations Manager » Version: 2.5.9

cpe:2.3:a:pivotal_software:operations_manager:2.5.9
Pivotal Software » Operations Manager » Version: 2.6.0

cpe:2.3:a:pivotal_software:operations_manager:2.6.0
Pivotal Software » Operations Manager » Version: 2.6.1

cpe:2.3:a:pivotal_software:operations_manager:2.6.1
Pivotal Software » Operations Manager » Version: 2.6.10

cpe:2.3:a:pivotal_software:operations_manager:2.6.10
Pivotal Software » Operations Manager » Version: 2.6.11

cpe:2.3:a:pivotal_software:operations_manager:2.6.11
Pivotal Software » Operations Manager » Version: 2.6.12

cpe:2.3:a:pivotal_software:operations_manager:2.6.12
Pivotal Software » Operations Manager » Version: 2.6.13

cpe:2.3:a:pivotal_software:operations_manager:2.6.13
Pivotal Software » Operations Manager » Version: 2.6.14

cpe:2.3:a:pivotal_software:operations_manager:2.6.14
Pivotal Software » Operations Manager » Version: 2.6.15

cpe:2.3:a:pivotal_software:operations_manager:2.6.15
Pivotal Software » Operations Manager » Version: 2.6.2

cpe:2.3:a:pivotal_software:operations_manager:2.6.2
Pivotal Software » Operations Manager » Version: 2.6.3

cpe:2.3:a:pivotal_software:operations_manager:2.6.3
Pivotal Software » Operations Manager » Version: 2.6.4

cpe:2.3:a:pivotal_software:operations_manager:2.6.4
Pivotal Software » Operations Manager » Version: 2.6.5

cpe:2.3:a:pivotal_software:operations_manager:2.6.5
Pivotal Software » Operations Manager » Version: 2.6.6

cpe:2.3:a:pivotal_software:operations_manager:2.6.6
Pivotal Software » Operations Manager » Version: 2.6.7

cpe:2.3:a:pivotal_software:operations_manager:2.6.7
Pivotal Software » Operations Manager » Version: 2.6.8

cpe:2.3:a:pivotal_software:operations_manager:2.6.8
Pivotal Software » Operations Manager » Version: 2.6.9

cpe:2.3:a:pivotal_software:operations_manager:2.6.9
Pivotal Software » Operations Manager » Version: 2.7.0

cpe:2.3:a:pivotal_software:operations_manager:2.7.0
Pivotal Software » Operations Manager » Version: 2.7.1

cpe:2.3:a:pivotal_software:operations_manager:2.7.1
Pivotal Software » Operations Manager » Version: 2.7.2

cpe:2.3:a:pivotal_software:operations_manager:2.7.2
Pivotal Software » Operations Manager » Version: 2.7.3

cpe:2.3:a:pivotal_software:operations_manager:2.7.3
Pivotal Software » Operations Manager » Version: 2.7.4

cpe:2.3:a:pivotal_software:operations_manager:2.7.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-11292

Products

Pricing

Contact Us