Pivotal Ops Manager up to 2.2.22/2.3.15/2.4.10/2.5.2 Token expired session expiration

Summaryinfo

A vulnerability, which was classified as critical, has been found in Pivotal Ops Manager up to 2.2.22/2.3.15/2.4.10/2.5.2. Affected by this issue is some unknown functionality of the component Token Handler. Performing a manipulation results in session expiration (expired). This vulnerability is reported as CVE-2019-3790. The attack is possible to be carried out remotely. No exploit exists. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, was found in Pivotal Ops Manager up to 2.2.22/2.3.15/2.4.10/2.5.2. This affects an unknown functionality of the component Token Handler. The manipulation with an unknown input leads to a session expiration vulnerability (Expired). CWE is classifying the issue as CWE-613. According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization." This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

The Pivotal Ops Manager, 2.2.x versions prior to 2.2.23, 2.3.x versions prior to 2.3.16, 2.4.x versions prior to 2.4.11, and 2.5.x versions prior to 2.5.3, contain configuration that circumvents refresh token expiration. A remote authenticated user can gain access to a browser session that was supposed to have expired, and access Ops Manager resources.

The weakness was disclosed 06/06/2019 (Website). The advisory is shared at pivotal.io. This vulnerability is uniquely identified as CVE-2019-3790 since 01/03/2019. The exploitability is told to be difficult. It is possible to initiate the attack remotely. The successful exploitation needs a authentication. Neither technical details nor an exploit are publicly available.

Upgrading to version 2.2.23, 2.3.16, 2.4.11 or 2.5.3 eliminates this vulnerability.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Vendor

• Pivotal

Name

• Ops Manager

Version

• 2.2.0
• 2.2.1
• 2.2.2
• 2.2.3
• 2.2.4
• 2.2.5
• 2.2.6
• 2.2.7
• 2.2.8
• 2.2.9
• 2.2.10
• 2.2.11
• 2.2.12
• 2.2.13
• 2.2.14
• 2.2.15
• 2.2.16
• 2.2.17
• 2.2.18
• 2.2.19
• 2.2.20
• 2.2.21
• 2.2.22
• 2.3.0
• 2.3.1
• 2.3.2
• 2.3.3
• 2.3.4
• 2.3.5
• 2.3.6
• 2.3.7
• 2.3.8
• 2.3.9
• 2.3.10
• 2.3.11
• 2.3.12
• 2.3.13
• 2.3.14
• 2.3.15
• 2.4.0
• 2.4.1
• 2.4.2
• 2.4.3
• 2.4.4
• 2.4.5
• 2.4.6
• 2.4.7
• 2.4.8
• 2.4.9
• 2.4.10
• 2.5.0
• 2.5.1
• 2.5.2

License

• commercial

Website

• Vendor: https://pivotal.io/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion