This issue was fixed in version prior to 100.0.4903.18. Note: This issue only affected users running Windows operating systems. After the fix, we no longer consider this issue to be critical. Perf issue: CVE-2018-6089 Exploitation: Remotely Exploitable - No Pivotal response, no patch available. CVE-2018-6090 Exploitation: Remotely Exploitable - No Pivotal response, no patch available. CVE-2018-6091 Exploitation: Remotely Exploitable - No Pivotal response, no patch available. CVE-2018-6092 Exploitation: Remotely Exploitable - No Pivotal response, no patch available. CVE-2018-6093 Exploitation: Remotely Exploitable - No Pivotal response, no patch available. CVE-2018-6094 Exploitation: Remotely Exploitable - No Pivotal response, no patch available. CVE-2018-6095 Exploitation: Remotely Exploitable - No Pivotal response, no patch available. CVE-2018-6096 Exploitation: Remotely Exploitable - No Pivotal response, no patch available. CVE-2018-6097 Exploitation: Remotely Exploitable - No Pivotal response, no patch available. CVE-2018-6098 Exploitation: Remotely Exploitable - No Piv

Summary of CVEs

One of the known vulnerabilities in Pivotal Cloud Foundry is the CVE-2018-6089. This issue was fixed in version prior to 100.0.4903.18, but it only affected users running Windows operating systems. After the fix, we no longer consider this issue to be critical.
Other than that, there were two other vulnerabilities that were fixed in an earlier version: the CVE-2018-6090 and the CVE-2018-6091. These issues were also fixed in 100.0.4903.18, so they are not of concern to customers with the most recent patch installed on their Cloud Foundry installation

Timeline

Published on: 07/23/2022 00:15:00 UTC
Last modified on: 08/15/2022 11:16:00 UTC

References