Pivotal Operations Manager up to 1.12.21/2.0.14/2.1.5 Random Number Generator random values

Summaryinfo

A vulnerability was found in Pivotal Operations Manager up to 1.12.21/2.0.14/2.1.5. It has been rated as critical. This issue affects some unknown processing of the component Random Number Generator. This manipulation causes random values. This vulnerability is registered as CVE-2018-11045. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability was found in Pivotal Operations Manager up to 1.12.21/2.0.14/2.1.5. It has been declared as critical. Affected by this vulnerability is an unknown function of the component Random Number Generator. The manipulation with an unknown input leads to a random values vulnerability. The CWE definition for the vulnerability is CWE-330. The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

Pivotal Operations Manager, versions 2.1 prior to 2.1.6 and 2.0 prior to 2.0.15 and 1.12 prior to 1.12.22, contains a static Linux Random Number Generator (LRNG) seed file embedded in the appliance image. An attacker with knowledge of the exact version and IaaS of a running OpsManager could get the contents of the corresponding seed from the published image and therefore infer the initial state of the LRNG.

The bug was discovered 07/10/2018. The weakness was published 07/11/2018 (Website). The advisory is shared at pivotal.io. This vulnerability is known as CVE-2018-11045 since 05/14/2018. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1600.001 for this issue.

The vulnerability was handled as a non-public zero-day exploit for at least 1 days. During that time the estimated underground price was around $0-$5k.

Upgrading to version 1.12.22, 2.0.15 or 2.1.6 eliminates this vulnerability.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Vendor

• Pivotal

Name

• Operations Manager

Version

• 1.12.0
• 1.12.1
• 1.12.2
• 1.12.3
• 1.12.4
• 1.12.5
• 1.12.6
• 1.12.7
• 1.12.8
• 1.12.9
• 1.12.10
• 1.12.11
• 1.12.12
• 1.12.13
• 1.12.14
• 1.12.15
• 1.12.16
• 1.12.17
• 1.12.18
• 1.12.19
• 1.12.20
• 1.12.21
• 2.0.0
• 2.0.1
• 2.0.2
• 2.0.3
• 2.0.4
• 2.0.5
• 2.0.6
• 2.0.7
• 2.0.8
• 2.0.9
• 2.0.10
• 2.0.11
• 2.0.12
• 2.0.13
• 2.0.14
• 2.1.0
• 2.1.1
• 2.1.2
• 2.1.3
• 2.1.4
• 2.1.5

License

• commercial

Website

• Vendor: https://pivotal.io/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion