{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2016-09-13T00:00:00", "descriptions": [{"lang": "en", "value": "Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.17 and 1.7.x before 1.7.8, when vCloud or vSphere is used, does not properly enable SSH access for operators, which has unspecified impact and remote attack vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2016-09-18T01:57:01", "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "shortName": "dell"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://pivotal.io/security/cve-2016-0897"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security_alert@emc.com", "ID": "CVE-2016-0897", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.17 and 1.7.x before 1.7.8, when vCloud or vSphere is used, does not properly enable SSH access for operators, which has unspecified impact and remote attack vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://pivotal.io/security/cve-2016-0897", "refsource": "CONFIRM", "url": "https://pivotal.io/security/cve-2016-0897"}]}}}}, "cveMetadata": {"assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "assignerShortName": "dell", "cveId": "CVE-2016-0897", "datePublished": "2016-09-18T01:00:00", "dateReserved": "2015-12-17T00:00:00", "dateUpdated": "2016-09-18T01:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:pivotal_software:operations_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "FC0FBDBF-118B-4573-95A1-E3DE377DC2A2", "versionEndIncluding": "1.6.16", "vulnerable": true}, {"criteria": "cpe:2.3:a:pivotal_software:operations_manager:1.7.0:*:*:*:*:*:*:*", "matchCriteriaId": "466DD7AA-9D45-44AC-8C08-2A9F4418423B", "vulnerable": true}, {"criteria": "cpe:2.3:a:pivotal_software:operations_manager:1.7.1:*:*:*:*:*:*:*", "matchCriteriaId": "8B495324-F0E0-4E62-BC58-79253B446210", "vulnerable": true}, {"criteria": "cpe:2.3:a:pivotal_software:operations_manager:1.7.2:*:*:*:*:*:*:*", "matchCriteriaId": "4F2D8956-202D-4724-A993-91A1A0B4A7A6", "vulnerable": true}, {"criteria": "cpe:2.3:a:pivotal_software:operations_manager:1.7.3:*:*:*:*:*:*:*", "matchCriteriaId": "1F3A06FD-DB82-43E6-8BC2-B42F6A584500", "vulnerable": true}, {"criteria": "cpe:2.3:a:pivotal_software:operations_manager:1.7.4:*:*:*:*:*:*:*", "matchCriteriaId": "713FA212-3A93-4976-9B03-20880E7BDA13", "vulnerable": true}, {"criteria": "cpe:2.3:a:pivotal_software:operations_manager:1.7.5:*:*:*:*:*:*:*", "matchCriteriaId": "3F174314-AF3D-4A21-A221-819B4B41905F", "vulnerable": true}, {"criteria": "cpe:2.3:a:pivotal_software:operations_manager:1.7.6:*:*:*:*:*:*:*", "matchCriteriaId": "3E6952CD-766A-49D8-B250-DD530E1E34A2", "vulnerable": true}, {"criteria": "cpe:2.3:a:pivotal_software:operations_manager:1.7.7:*:*:*:*:*:*:*", "matchCriteriaId": "A11FF40F-EA13-41BA-9D35-3A83C08D4B41", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.17 and 1.7.x before 1.7.8, when vCloud or vSphere is used, does not properly enable SSH access for operators, which has unspecified impact and remote attack vectors."}, {"lang": "es", "value": "Pivotal Cloud Foundry (PCF) Ops Manager en versiones anteriores a 1.6.17 y 1.7.x en versiones anteriores a 1.7.8, cuando se usa vCloud o vSphere, no activa adecuadamente acceso SSH para operadores, lo que tiene un impacto no especifico y vectores de ataque remotos."}], "id": "CVE-2016-0897", "lastModified": "2016-10-03T17:34:46.070", "metrics": {"cvssMetricV2": [{"acInsufInfo": true, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2016-09-18T02:59:02.870", "references": [{"source": "security_alert@emc.com", "tags": ["Vendor Advisory"], "url": "https://pivotal.io/security/cve-2016-0897"}], "sourceIdentifier": "security_alert@emc.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-310"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}