PatchTheCVEpivotal software vulnerabilities
Recent CVEs affecting pivotal software products. 7 tracked.
pivotal software has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 7. Most recent: 2022-12-19. Highest priority: CVE-2020-5415 (score 57/100).
- CVE-2022-31683 MEDIUM 5.4 UPGRADE Concourse (7.x.y prior to 7.8.3 and 6.x.y prior to 6.7.9) contains an authorization bypass issue
- CVE-2021-22112 HIGH 8.8 UPGRADE UPGRADE Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and older un
- CVE-2020-5419 MEDIUM 6.7 UPGRADE UPGRADE RabbitMQ versions 3.8.x prior to 3.8.7 are prone to a Windows-specific binary planting security vulnerability
- CVE-2020-5415 CRITICAL 10.0 UPGRADE Concourse, versions prior to 6.3.1 and 6.4.1, in installations which use the GitLab auth connector, is vulnera
- CVE-2020-5409 MEDIUM 6.1 UPGRADE Pivotal Concourse, most versions prior to 6.0.0, allows redirects to untrusted websites in its login flow
- CVE-2020-5408 MEDIUM 6.5 UPGRADE UPGRADE Spring Security versions 5.3.x prior to 5.3.2, 5.2.x prior to 5.2.4, 5.1.x prior to 5.1.10, 5.0.x prior to 5.0
- CVE-2020-5407 HIGH 8.8 UPGRADE Spring Security versions 5.2.x prior to 5.2.4 and 5.3.x prior to 5.3.2 contain a signature wrapping vulnerabil
FAQ
How do I fix pivotal software vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is pivotal software being exploited right now?
None of the tracked pivotal software CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which pivotal software CVE should I patch first?
CVE-2020-5415 currently ranks highest (57/100): Concourse, versions prior to 6.3.1 and 6.4.1, in installations which use the GitLab auth connector, is vulnera.