What is CVE-2019-3793?

CVE-2019-3793 is a critical-severity vulnerability in Pivotal Apps Manager, classified under Channel Accessible by Non-Endpoint. CVSS score: 9.8/10. Published 2019-04-24.

How severe is CVE-2019-3793?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Pivotal Apps Manager

CVE-2019-3793

Pivotal Apps Manager Release, versions 665.0.x prior to 665.0.28, versions 666.0.x prior to 666.0.21, versions 667.0.x prior to 667.0.7, contain an invitation service that accepts HTTP. A remote unauthenticated user could listen to network…

EPSS: 0.011 (60.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Pivotal Apps Manager — versions 666, 667, 665
Pivotal_software Application_service

Weakness classification (CWE)

CWE-300 — Channel Accessible by Non-Endpoint
CWE-319 — Cleartext Transmission of Sensitive Information

References

security_alert@emc.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-3793?: CVE-2019-3793 is a critical-severity vulnerability in Pivotal Apps Manager, classified under Channel Accessible by Non-Endpoint. CVSS score: 9.8/10. Published 2019-04-24.
How severe is CVE-2019-3793?: Critical severity. CVSS v3 base score is 9.8 out of 10.