CVE-2019-11292

6.5 mediumEPSS 1.1%

Pivotal Ops Manager, versions 2.4.x prior to 2.4.27, 2.5.x prior to 2.5.24, 2.6.x prior to 2.6.16, and 2.7.x prior to 2.7.5, logs all query parameters to tomcat’s access file. If the query parameters are used to provide authentication, ie. credentials, then they will be logged as well.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-532
Published: 2020-01-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

pivotal_software:operations_manager

References

https://pivotal.io/security/cve-2019-11292
https://pivotal.io/security/cve-2019-11292

Check your stack JSON