Vulnerability CVE-2019-3790

Vulnerability Name:

CVE-2019-3790 (CCN-162289)

Assigned:

2019-05-24

Published:

2019-05-24

Updated:

2019-10-09

Summary:

The Pivotal Ops Manager, 2.2.x versions prior to 2.2.23, 2.3.x versions prior to 2.3.16, 2.4.x versions prior to 2.4.11, and 2.5.x versions prior to 2.5.3, contain configuration that circumvents refresh token expiration. A remote authenticated user can gain access to a browser session that was supposed to have expired, and access Ops Manager resources.

CVSS v3 Severity:

5.4 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
4.7 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): None

4.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
3.8 Low (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

5.5 Medium (CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): None

4.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

Vulnerability Type:

CWE-613

Vulnerability Consequences:

Bypass Security

References:

Source: MITRE
Type: CNA
CVE-2019-3790

Source: BID
Type: Third Party Advisory, VDB Entry
108512

Source: XF
Type: UNKNOWN
pivotal-cve20193790-sec-bypass(162289)

Source: CCN
Type: Pivotal Web site
CVE-2019-3790: Ops Manager uaa client issues tokens after refresh token expiration

Source: CONFIRM
Type: Vendor Advisory
https://pivotal.io/security/cve-2019-3790

Vulnerable Configuration:

Configuration 1:

cpe:/a:pivotal_software:operations_manager:*:*:*:*:*:*:*:* (Version >= 2.2.0 and < 2.2.23)

OR cpe:/a:pivotal_software:operations_manager:*:*:*:*:*:*:*:* (Version >= 2.3.0 and < 2.3.16)

OR cpe:/a:pivotal_software:operations_manager:*:*:*:*:*:*:*:* (Version >= 2.4.0 and < 2.4.11)

OR cpe:/a:pivotal_software:operations_manager:*:*:*:*:*:*:*:* (Version >= 2.5.0 and < 2.5.3)

Denotes that component is vulnerable

BACK