Medium severity6.5NVD Advisory· Published Mar 16, 2018· Updated Jun 17, 2026
CVE-2018-1200
CVE-2018-1200
Description
Apps Manager for PCF (Pivotal Application Service 1.11.x before 1.11.26, 1.12.x before 1.12.14, and 2.0.x before 2.0.5) allows unprivileged remote file read in its container via specially-crafted links.
Affected products
3- cpe:2.3:a:pivotal_software:pivotal_application_service:*:*:*:*:*:*:*:*Range: >=1.11.0,<1.11.26
- Range: >=1.11 <1.11.26, >=1.12 <1.12.14, >=2.0 <2.0.5
- Range: Pivotal Application Service: 1.11.x versions prior to 1.11.26, 1.12.x versions prior to 1.12.14, 2.0.x versions prior to 2.0.5, Please note: PAS versions prior to 1.11 are not affected.
Patches
Vulnerability mechanics
References
2- www.securityfocus.com/bid/103042nvdThird Party AdvisoryVDB Entry
- pivotal.io/security/cve-2018-1200nvdVendor Advisory
News mentions
0No linked articles in our index yet.