Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 23:52:53 +0000 cnvd-2019-07890 https://cve.radiocsirt.org/vuln/cnvd-2019-07890 cnvd-2019-07890 https://cve.radiocsirt.org/vuln/cnvd-2019-07890 EUVD-2026-173231 https://cve.radiocsirt.org/vuln/euvd-2026-173231 EUVD-2026-173231 https://cve.radiocsirt.org/vuln/euvd-2026-173231 fkie_cve-2019-3777 https://cve.radiocsirt.org/vuln/fkie_cve-2019-3777 <p>Pivotal Application Service (PAS), versions 2.2.x prior to 2.2.12, 2.3.x prior to 2.3.7 and 2.4.x prior to 2.4.3, contain apps manager that uses a cloud controller proxy that fails to verify SSL certs. A remote unauthenticated attacker that could hijack the Cloud Controller&#39;s DNS record could intercept access tokens sent to the Cloud Controller, giving the attacker access to the user&#39;s resources in the Cloud Controller</p> <p>Pivotal Application Service (PAS), versions 2.2.x prior to 2.2.12, 2.3.x prior to 2.3.7 and 2.4.x prior to 2.4.3, contain apps manager that uses a cloud controller proxy that fails to verify SSL certs. A remote unauthenticated attacker that could hijack the Cloud Controller&#39;s DNS record could intercept access tokens sent to the Cloud Controller, giving the attacker access to the user&#39;s resources in the Cloud Controller</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-3777 GHSA-g3g6-cq9j-rcv6 https://cve.radiocsirt.org/vuln/ghsa-g3g6-cq9j-rcv6 <p>Pivotal Application Service (PAS), versions 2.2.x prior to 2.2.12, 2.3.x prior to 2.3.7 and 2.4.x prior to 2.4.3, contain apps manager that uses a cloud controller proxy that fails to verify SSL certs. A remote unauthenticated attacker that could hijack the Cloud Controller&#39;s DNS record could intercept access tokens sent to the Cloud Controller, giving the attacker access to the user&#39;s resources in the Cloud Controller</p> <p>Pivotal Application Service (PAS), versions 2.2.x prior to 2.2.12, 2.3.x prior to 2.3.7 and 2.4.x prior to 2.4.3, contain apps manager that uses a cloud controller proxy that fails to verify SSL certs. A remote unauthenticated attacker that could hijack the Cloud Controller&#39;s DNS record could intercept access tokens sent to the Cloud Controller, giving the attacker access to the user&#39;s resources in the Cloud Controller</p> https://cve.radiocsirt.org/vuln/ghsa-g3g6-cq9j-rcv6 gsd-2019-3777 https://cve.radiocsirt.org/vuln/gsd-2019-3777 gsd-2019-3777 https://cve.radiocsirt.org/vuln/gsd-2019-3777