Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-4941 State: PUBLISHED Published: 2017-12-20T15:00:00Z Last Updated: 2024-09-16T17:58:23.789Z Vendors: VMware Products: ESXi, Workstation, Fusion Problem Types: Stack overflow via authenticated VNC session Description: VMware ESXi (6.0 before ESXi600-201711101-SG, 5.5 ESXi550-201709101-SG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a vulnerability that could allow an authenticated VNC session to cause a stack overflow via a specific set of VNC packets. Successful exploitation of this issue could result in remote code execution in a virtual machine via the authenticated VNC session. Note: In order for exploitation to be possible in ESXi, VNC must
n a virtual machine via the authenticated VNC session. Note: In order for exploitation to be possible in ESXi, VNC must be manually enabled in a virtual machine's .vmx configuration file. In addition, ESXi must be configured to allow VNC traffic through the built-in firewall. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2017-0021.html - http://www.securitytracker.com/id/1040025 - http://www.securitytracker.com/id/1040024
CVE ID: CVE-2017-4942 State: PUBLISHED Published: 2017-12-13T02:00:00Z Last Updated: 2024-09-16T17:58:52.370Z Vendors: VMware Products: Airwatch Console Problem Types: Broken Access Control Description: VMware AirWatch Console (AWC) contains a Broken Access Control vulnerability. Successful exploitation of this issue could result in end-user device details being disclosed to an unauthorized administrator. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2017-0020.html - http://www.securitytracker.com/id/1040003 - http://www.securityfocus.com/bid/102171
CVE ID: CVE-2017-4943 State: PUBLISHED Published: 2017-12-20T15:00:00Z Last Updated: 2024-09-16T18:40:02.798Z Vendors: VMware Products: vCenter Server Appliance (vCSA) Problem Types: Privilege escalation vulnerability Description: VMware vCenter Server Appliance (vCSA) (6.5 before 6.5 U1d) contains a local privilege escalation vulnerability via the 'showlog' plugin. Successful exploitation of this issue could result in a low privileged user gaining root level privileges over the appliance base OS. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2017-0021.html - http://www.securitytracker.com/id/1040026
CVE ID: CVE-2017-4945 State: PUBLISHED Published: 2018-01-05T14:00:00Z Last Updated: 2024-09-17T00:11:23.535Z Vendors: VMware Products: Workstation, Fusion Problem Types: Guest access control vulnerability Description: VMware Workstation (14.x and 12.x) and Fusion (10.x and 8.x) contain a guest access control vulnerability. This issue may allow program execution via Unity on locked Windows VMs. VMware Tools must be updated to 10.2.0 for each VM to resolve CVE-2017-4945. VMware Tools 10.2.0 is consumed by Workstation 14.1.0 and Fusion 10.1.0 by default. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040109 - https://www.vmware.com/us/securi
tes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040109 - https://www.vmware.com/us/security/advisories/VMSA-2018-0003.html - http://www.securityfocus.com/bid/102441 - http://www.securitytracker.com/id/1040136
CVE ID: CVE-2017-4946 State: PUBLISHED Published: 2018-01-05T14:00:00Z Last Updated: 2024-09-16T16:13:08.171Z Vendors: VMware Products: vRealize Operations for Horizon (V4H), vRealize Operations for Published Applications (V4PA) Problem Types: Privilege escalation vulnerability Description: The VMware V4H and V4PA desktop agents (6.x before 6.5.1) contain a privilege escalation vulnerability. Successful exploitation of this issue could result in a low privileged windows user escalating their privileges to SYSTEM. Additional Analyst Notes: - CVE Program Container: References: - http://gosecure.net/2018/01/10/vmware-horizon-v4h-v4pa-desktop-agent-privilege-escalation-vulnerability-cve-2017-494
: - http://gosecure.net/2018/01/10/vmware-horizon-v4h-v4pa-desktop-agent-privilege-escalation-vulnerability-cve-2017-4946/ - https://www.vmware.com/us/security/advisories/VMSA-2018-0003.html - http://www.securityfocus.com/bid/102441 - http://www.securitytracker.com/id/1040136
CVE ID: CVE-2017-4947 State: PUBLISHED Published: 2018-01-29T16:00:00Z Last Updated: 2024-09-17T01:46:48.338Z Vendors: VMware Products: vRealize Automation, vSphere Integrated Containers Problem Types: Deserialization vulnerability via Xenon Description: VMware vRealize Automation (7.3 and 7.2) and vSphere Integrated Containers (1.x before 1.3) contain a deserialization vulnerability via Xenon. Successful exploitation of this issue may allow remote attackers to execute arbitrary code on the appliance. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102852 - https://www.vmware.com/security/advisories/VMSA-2018-0006.html - http://www.securitytr
ww.securityfocus.com/bid/102852 - https://www.vmware.com/security/advisories/VMSA-2018-0006.html - http://www.securitytracker.com/id/1040289 - http://www.securitytracker.com/id/1040290
CVE ID: CVE-2017-4948 State: PUBLISHED Published: 2018-01-05T14:00:00Z Last Updated: 2024-09-16T23:31:06.432Z Vendors: VMware Products: Workstation, Horizon Client for Windows Problem Types: Out-of-bounds read Description: VMware Workstation (14.x before 14.1.0 and 12.x) and Horizon View Client (4.x before 4.7.0) contain an out-of-bounds read vulnerability in TPView.dll. On Workstation, this issue in conjunction with other bugs may allow a guest to leak information from host or may allow for a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this issue in conjunction with other bugs may allow a View desktop to leak information from host or may
on View Client, this issue in conjunction with other bugs may allow a View desktop to leak information from host or may allow for a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040109 - http://www.securitytracker.com/id/1040108 - https://www.vmware.com/us/security/advisories/VMSA-2018-0003.html - http://www.securityfocus.com/bid/102441 - http://www.securitytracker.com/id/1040136
CVE ID: CVE-2017-4949 State: PUBLISHED Published: 2018-01-11T14:00:00Z Last Updated: 2024-09-16T22:46:45.435Z Vendors: VMware Products: Workstation Pro / Player, Fusion Problem Types: Use-after-free vulnerability Description: VMware Workstation and Fusion contain a use-after-free vulnerability in VMware NAT service when IPv6 mode is enabled. This issue may allow a guest to execute code on the host. Note: IPv6 mode for VMNAT is not enabled by default. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040161 - http://www.securityfocus.com/bid/102489 - https://www.vmware.com/security/advisories/VMSA-2018-0005.html
CVE ID: CVE-2017-4950 State: PUBLISHED Published: 2018-01-11T14:00:00Z Last Updated: 2024-09-17T02:47:03.609Z Vendors: VMware Products: Workstation Pro / Player, Fusion Problem Types: Integer-overflow vulnerability Description: VMware Workstation and Fusion contain an integer overflow vulnerability in VMware NAT service when IPv6 mode is enabled. This issue may lead to an out-of-bound read which can then be used to execute code on the host in conjunction with other issues. Note: IPv6 mode for VMNAT is not enabled by default. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040161 - https://www.vmware.com/security/advisories/VMSA-2018-0005.ht
: References: - http://www.securitytracker.com/id/1040161 - https://www.vmware.com/security/advisories/VMSA-2018-0005.html - http://www.securityfocus.com/bid/102490
CVE ID: CVE-2017-4951 State: PUBLISHED Published: 2018-01-29T16:00:00Z Last Updated: 2024-09-16T20:03:05.532Z Vendors: VMware Products: AirWatch Console Problem Types: Cross Site Request Forgery Description: VMware AirWatch Console (9.2.x before 9.2.2 and 9.1.x before 9.1.5) contains a Cross Site Request Forgery vulnerability when accessing the App Catalog. An attacker may exploit this issue by tricking users into installing a malicious application on their devices. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2018-0006.html - http://www.securitytracker.com/id/1040288 - http://www.securityfocus.com/bid/102849
CVE ID: CVE-2017-4952 State: PUBLISHED Published: 2018-05-02T14:00:00Z Last Updated: 2024-09-16T23:41:59.277Z Vendors: VMware Products: VMware Xenon Problem Types: Authentication bypass vulnerability Description: VMware Xenon 1.x, prior to 1.5.4-CR7_1, 1.5.7_7, 1.5.4-CR6_2, 1.3.7-CR1_2, 1.1.0-CR0-3, 1.1.0-CR3_1,1.4.2-CR4_1, and 1.5.4_8, contains an authentication bypass vulnerability due to insufficient access controls for utility endpoints. Successful exploitation of this issue may result in information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/vmware/xenon/commit/b1fd306047ecdac82661d636ebee801a7f2b3a0a - https://github.com/vmware/xenon
ces: - https://github.com/vmware/xenon/commit/b1fd306047ecdac82661d636ebee801a7f2b3a0a - https://github.com/vmware/xenon/commit/30ae41bccf418d88b52b35a81efb3c1304b798f8 - http://www.securityfocus.com/bid/103093 - https://github.com/vmware/xenon/commit/756d893573414eec8635c2aba2345c4dcf10b21c - http://seclists.org/oss-sec/2018/q1/153 - https://github.com/vmware/xenon/commit/5682ef8d40569afd00fb9a5933e7706bb5b66713 - https://github.com/vmware/xenon/commit/ec30db9afada9cb52852082ce4d7d0095524f3b3 - https://github.com/vmware/xenon/commit/055ae13603f0cc3cd7cf59f20ce314bf8db583e1 - https://github.com/vmware/xenon/commit/c23964eb57e846126daef98ef7ed15400313e977 - https://github.com/vmware/xenon/com
- https://github.com/vmware/xenon/commit/c23964eb57e846126daef98ef7ed15400313e977 - https://github.com/vmware/xenon/commit/7a747d82b80cd38d2c11a0d9cdedb71c722a2c75 - https://github.com/vmware/xenon/commit/06b9947cf603ba40fd8b03bfeb2e84528a7ab592
CVE ID: CVE-2017-4955 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T14:47:44.061Z Vendors: n/a Products: PCF Elastic Runtime Problem Types: Credentials in Elastic Runtime Notifications errand log Description: An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.65, 1.7.x versions prior to 1.7.48, 1.8.x versions prior to 1.8.28, and 1.9.x versions prior to 1.9.5. Several credentials were present in the logs for the Notifications errand in the PCF Elastic Runtime tile. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2017-4955 - http://www.securityfocus.com/bid/97082
CVE ID: CVE-2017-4956 State: REJECTED Published: 2018-01-03T15:00:00 Last Updated: 2018-01-03T14:57:01 Description: No description available.
CVE ID: CVE-2017-4957 State: REJECTED Published: 2018-01-03T15:00:00 Last Updated: 2018-01-03T14:57:01 Description: No description available.
CVE ID: CVE-2017-4958 State: REJECTED Published: 2018-01-03T15:00:00 Last Updated: 2018-01-03T14:57:01 Description: No description available.
CVE ID: CVE-2017-4959 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T14:47:43.745Z Vendors: n/a Products: PCF Elastic Runtime Problem Types: Pivotal Cloud Foundry account authorization vulnerability Description: An issue was discovered in Pivotal PCF Elastic Runtime 1.8.x versions prior to 1.8.29 and 1.9.x versions prior to 1.9.7. Pivotal Cloud Foundry deployments using the Pivotal Account application are vulnerable to a flaw which allows an authorized user to take over the account of another user, causing account lockout and potential escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96218 -
f privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96218 - https://pivotal.io/security/cve-2017-4959
CVE ID: CVE-2017-4960 State: PUBLISHED Published: 2017-03-10T01:00:00 Last Updated: 2024-08-05T14:47:43.770Z Vendors: n/a Products: Cloud Foundry Foundation Cloud Foundry release v247 - v252, UAA stand-alone release v3.9.0 - v3.11.0, UAA Bosh Release v21 - v26 Problem Types: DOS Description: An issue was discovered in Cloud Foundry release v247 through v252, UAA stand-alone release v3.9.0 through v3.11.0, and UAA Bosh Release v21 through v26. There is a potential to subject the UAA OAuth clients to a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/cve-2017-4960/ - http://www.securityfocus.com/bid/96780
CVE ID: CVE-2017-4961 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T14:47:43.376Z Vendors: n/a Products: Cloud Foundry Foundation BOSH Release Problem Types: BOSH Director Shell Injection Vulnerabilities Description: An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions. In certain cases an authenticated Director user can provide a malicious checksum that could allow them to escalate their privileges on the Director VM, aka "BOSH Director Shell Injection Vulnerabilities." Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/cve-2017-4961/
CVE ID: CVE-2017-4962 State: REJECTED Published: 2018-01-25T15:00:00 Last Updated: 2018-01-25T14:57:01 Description: No description available.
CVE ID: CVE-2017-4963 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T14:47:43.348Z Vendors: n/a Products: Cloud Foundry Foundation Problem Types: Session Fixation for UAA External Authentication Description: An issue was discovered in Cloud Foundry Foundation Cloud Foundry release v252 and earlier versions, UAA stand-alone release v2.0.0 - v2.7.4.12 & v3.0.0 - v3.11.0, and UAA bosh release v26 & earlier versions. UAA is vulnerable to session fixation when configured to authenticate against external SAML or OpenID Connect based identity providers. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/cve-2017-4963/
CVE ID: CVE-2017-4964 State: PUBLISHED Published: 2017-04-06T19:00:00 Last Updated: 2024-08-05T14:47:43.294Z Vendors: n/a Products: Cloud Foundry Foundation BOSH Azure CPI Release v22 Problem Types: CPI code injection vulnerability Description: Cloud Foundry Foundation BOSH Azure CPI v22 could potentially allow a maliciously crafted stemcell to execute arbitrary code on VMs created by the director, aka a "CPI code injection vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/cve-2017-4964/
CVE ID: CVE-2017-4965 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T14:47:43.344Z Vendors: n/a Products: Pivotal RabbitMQ Problem Types: XSS vulnerabilities in RabbitMQ management UI Description: An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ management UI are vulnerable to XSS attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98394 - https://pivotal.io/security/cve-2017
es: - CVE Program Container: References: - http://www.securityfocus.com/bid/98394 - https://pivotal.io/security/cve-2017-4965 - https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html
CVE ID: CVE-2017-4966 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T14:47:44.070Z Vendors: n/a Products: Pivotal RabbitMQ Problem Types: local storage of credentials Description: An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. RabbitMQ management UI stores signed-in user credentials in a browser's local storage without expiration, making it possible to retrieve them using a chained attack. Additional Analyst Notes: - CVE Program Container: References: - htt
t possible to retrieve them using a chained attack. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2017-4966 - https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html
CVE ID: CVE-2017-4967 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T14:47:43.349Z Vendors: n/a Products: Pivotal RabbitMQ Problem Types: XSS vulnerabilities in RabbitMQ management UI Description: An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ management UI are vulnerable to XSS attacks. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2017-4965 - https://lists.debian.org/debian-l
es: - CVE Program Container: References: - https://pivotal.io/security/cve-2017-4965 - https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html
CVE ID: CVE-2017-4968 State: REJECTED Published: 2018-01-03T15:00:00 Last Updated: 2018-01-03T14:57:01 Description: No description available.
CVE ID: CVE-2017-4969 State: PUBLISHED Published: 2017-04-20T22:00:00 Last Updated: 2024-08-05T14:47:44.132Z Vendors: n/a Products: Cloud Foundry Cloud Controller cf-release versions prior to v255 Problem Types: Authenticated developer users to exceed memory and disk quotas for tasks Description: The Cloud Controller in Cloud Foundry cf-release versions prior to v255 allows authenticated developer users to exceed memory and disk quotas for tasks. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/cve-2017-4969/
CVE ID: CVE-2017-4970 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T14:47:43.684Z Vendors: n/a Products: Cloud Foundry Problem Types: Staticfile buildpack ignores basic authentication when misconfigured Description: An issue was discovered in Cloud Foundry Foundation cf-release v255 and Staticfile buildpack versions v1.4.0 - v1.4.3. A regression introduced in the Static file build pack causes the Staticfile.auth configuration to be ignored when the Static file file is not present in the application root. Applications containing a Staticfile.auth file but not a Static file had their basic auth turned off when an operator upgraded the Static file build pack in the fo
ile but not a Static file had their basic auth turned off when an operator upgraded the Static file build pack in the foundation to one of the vulnerable versions. Note that Static file applications without a Static file are technically misconfigured, and will not successfully detect unless the Static file build pack is explicitly specified. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/cve-2017-4970/
CVE ID: CVE-2017-4971 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T14:47:44.336Z Vendors: n/a Products: Spring Web Flow Problem Types: Data Binding Expression Vulnerability in Spring Web Flow Description: An issue was discovered in Pivotal Spring Web Flow through 2.4.4. Applications that do not change the value of the MvcViewFactoryCreator useSpringBinding property which is disabled by default (i.e., set to 'false') can be vulnerable to malicious EL expressions in view states that process form submissions but do not have a sub-element to declare explicit data binding property mappings. Additional Analyst Notes: - CVE Program Container: References: - http://www.sec
explicit data binding property mappings. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98785 - https://pivotal.io/security/cve-2017-4971 - https://jira.spring.io/browse/SWF-1700
CVE ID: CVE-2017-4972 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T14:47:43.936Z Vendors: n/a Products: Cloud Foundry UAA Problem Types: Blind SQL Injection in UAA Description: An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions prior to v3.6.8, 3.9.x versions prior to v3.9.10, and other versions prior to v3.15.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.12, 24.x versions prior to v24.7, and other versions prior to v30. An attacker can use a blind SQL injection attack to query the contents of the UAA database. Additional Analyst Notes: - CVE Program
can use a blind SQL injection attack to query the contents of the UAA database. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/cve-2017-4972/
CVE ID: CVE-2017-4973 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T14:47:44.126Z Vendors: n/a Products: Cloud Foundry UAA Problem Types: Privilege Escalation in UAA Description: An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions prior to v3.6.8, 3.9.x versions prior to v3.9.10, and other versions prior to v3.15.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.12, 24.x versions prior to v24.7, and other versions prior to v30. A vulnerability has been identified with the groups endpoint in UAA allowing users to elevate their privileges. Additional Analyst
lity has been identified with the groups endpoint in UAA allowing users to elevate their privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/cve-2017-4973/
CVE ID: CVE-2017-4974 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T14:47:43.914Z Vendors: n/a Products: Cloud Foundry UAA Problem Types: Blind SQL Injection with privileged UAA endpoints Description: An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v258; UAA release 2.x versions prior to v2.7.4.15, 3.6.x versions prior to v3.6.9, 3.9.x versions prior to v3.9.11, and other versions prior to v3.16.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.13, 24.x versions prior to v24.8, and other versions prior to v30.1. An authorized user can use a blind SQL injection attack to query the contents of the UAA database, aka "Bli
or to v30.1. An authorized user can use a blind SQL injection attack to query the contents of the UAA database, aka "Blind SQL Injection with privileged UAA endpoints." Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/cve-2017-4974/ - http://www.securityfocus.com/bid/99254
CVE ID: CVE-2017-4975 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T14:47:44.027Z Vendors: n/a Products: PCF Tile Generator Problem Types: Tile generator sets open security groups Description: An issue was discovered in Pivotal PCF Tile Generator versions prior to 6.0.0. Tiles created by the PCF Tile Generator create a running open security group that overrides security groups set by the operator. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2017-4975