VULNERABILITY INTELLIGENCE

CVE-2018-11046

CVSS score6.5 MEDIUM

EPSS probability0.89%

CISA KEVNot currently listed

Published2018-06-25

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Description

Pivotal Operations Manager, versions 2.1.x prior to 2.1.6 and version 2.0.14, includes NGINX packages that lacks security vulnerability patches. An attacker with access to the NGINX processes and knowledge of how to exploit the unpatched vulnerabilities may be able to impact Operations Manager

Weakness classification

CWE-20: Improper Input Validation

Primary references

security_alert@emc.com — Third Party Advisory, VDB Entry
security_alert@emc.com — Mitigation, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Vendor Advisory