Security Advisory

CVE-2018-15795

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-11-13 14:00:00
Last updated 2024-09-16 16:47:36
Assigner dell
CVSS score 8.1
State PUBLISHED

Description

Pivotal CredHub Service Broker, versions prior to 1.1.0, uses a guessable form of random number generation in creating service broker's UAA client. A remote malicious user may guess the client secret and obtain or modify credentials for users of the CredHub Service.