CVE-2018-11081

8.8 highEPSS 1.4%

Pivotal Operations Manager, versions 2.2.x prior to 2.2.1, 2.1.x prior to 2.1.11, 2.0.x prior to 2.0.16, and 1.11.x prior to 2, fails to write the Operations Manager UAA config onto the temp RAM disk, thus exposing the configs directly onto disk. A remote user that has gained access to the Operations Manager VM, can now file search and find the UAA credentials for Operations Manager on the system disk..

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
Published: 2018-10-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

pivotal_software:operations_manager

References

https://pivotal.io/security/cve-2018-11081
https://pivotal.io/security/cve-2018-11081

Check your stack JSON