What is CVE-2016-0897?

CVE-2016-0897 is a critical-severity vulnerability in Pivotal_software Operations_manager, classified under Cryptographic Issues. CVSS score: 9.8/10. Published 2016-09-18.

How severe is CVE-2016-0897?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Pivotal_software Operations_manager

CVE-2016-0897

Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.17 and 1.7.x before 1.7.8, when vCloud or vSphere is used, does not properly enable SSH access for operators, which has unspecified impact and remote attack vectors.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.015 (70.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Pivotal_software Operations_manager — versions 1.7.0, 1.7.1, 1.7.2
N/a — versions n/a

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

References

security_alert@emc.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2016-0897?: CVE-2016-0897 is a critical-severity vulnerability in Pivotal_software Operations_manager, classified under Cryptographic Issues. CVSS score: 9.8/10. Published 2016-09-18.
How severe is CVE-2016-0897?: Critical severity. CVSS v3 base score is 9.8 out of 10.