CVE-2019-3777

Pivotal Application Service (PAS), versions 2.2.x prior to 2.2.12, 2.3.x prior to 2.3.7 and 2.4.x prior to 2.4.3, contain apps manager that uses a cloud controller proxy that fails to verify SSL certs. A remote unauthenticated attacker that could hijack the Cloud Controller's DNS record could intercept access tokens sent to the Cloud Controller, giving the attacker access to the user's resources in the Cloud Controller

CVSS v3 8.0 HIGH
CVSS v2.0 5.0 MEDIUM

8.0^/10

CVSS v3 : HIGH

Vector : AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N

Exploitability : 1.6 / Impact : 5.8

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope CHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.securityfocus.com/bid/107214	Third Party Advisory VDB Entry
https://pivotal.io/security/cve-2019-3777	Vendor Advisory
http://www.securityfocus.com/bid/107214	Third Party Advisory VDB Entry
https://pivotal.io/security/cve-2019-3777	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:pivotal_software:application_service::::::::
	cpe:2.3:a:pivotal_software:application_service::::::::
	cpe:2.3:a:pivotal_software:application_service::::::::

History

21 Nov 2024, 04:42

Type	Values Removed	Values Added
CVSS	v2 : ~~5.0~~ v3 : ~~9.8~~	v2 : 5.0 v3 : 8.0
References	~~() http://www.securityfocus.com/bid/107214 - Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/bid/107214 - Third Party Advisory, VDB Entry
References	~~() https://pivotal.io/security/cve-2019-3777 - Vendor Advisory~~	() https://pivotal.io/security/cve-2019-3777 - Vendor Advisory

Information

Published : 2019-03-07 18:29

Updated : 2024-11-21 04:42

NVD link : CVE-2019-3777

Mitre link : CVE-2019-3777

CVE.ORG link : CVE-2019-3777

JSON object : View

Products Affected

pivotal_software

application_service

CWE

CWE-295

Improper Certificate Validation

{"id": "CVE-2019-3777", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Secondary", "source": "security_alert@emc.com", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 8.0, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.8, "exploitabilityScore": 1.6}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2019-03-07T18:29:00.447", "references": [{"url": "http://www.securityfocus.com/bid/107214", "tags": ["Third Party Advisory", "VDB Entry"], "source": "security_alert@emc.com"}, {"url": "https://pivotal.io/security/cve-2019-3777", "tags": ["Vendor Advisory"], "source": "security_alert@emc.com"}, {"url": "http://www.securityfocus.com/bid/107214", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://pivotal.io/security/cve-2019-3777", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security_alert@emc.com", "description": [{"lang": "en", "value": "CWE-295"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-295"}]}], "descriptions": [{"lang": "en", "value": "Pivotal Application Service (PAS), versions 2.2.x prior to 2.2.12, 2.3.x prior to 2.3.7 and 2.4.x prior to 2.4.3, contain apps manager that uses a cloud controller proxy that fails to verify SSL certs. A remote unauthenticated attacker that could hijack the Cloud Controller's DNS record could intercept access tokens sent to the Cloud Controller, giving the attacker access to the user's resources in the Cloud Controller"}, {"lang": "es", "value": "Pivotal Application Service (PAS), en las versiones 2.2.x anteriores a la 2.2.12, en las 2.3.x anteriores a la 2.3.7 y en las 2.4.x anteriores a la 2.4.3, contiene un gestor de aplicaciones que utiliza un proxy de controlador cloud que no verifica los certificados SSL de manera correcta. Un atacante remoto no autenticado capaz de secuestrar el registro DNS del controlador Cloud podr\u00eda interceptar los tokens de acceso enviados al controlador Cloud, proporcionando al atacante el acceso a los recursos del usuario en dicho controlador."}], "lastModified": "2024-11-21T04:42:31.303", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:pivotal_software:application_service:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BBC2696F-F573-4358-9759-E283D2B83209", "versionEndExcluding": "2.2.12", "versionStartIncluding": "2.2.0"}, {"criteria": "cpe:2.3:a:pivotal_software:application_service:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A6B5D54C-7448-4B56-9238-316A1338A874", "versionEndExcluding": "2.3.7", "versionStartIncluding": "2.3.0"}, {"criteria": "cpe:2.3:a:pivotal_software:application_service:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93EDD2F1-9A14-473E-A082-E1AD1DCA943D", "versionEndExcluding": "2.4.3", "versionStartIncluding": "2.4.0"}], "operator": "OR"}]}], "sourceIdentifier": "security_alert@emc.com"}