VMware Tanzu vulnerabilities

Newest CVEs

• CVE-2020-5426

  Scheduler for TAS can transmit privileged UAA token in plaintext

  VMware Tanzu · Pivotal Scheduler

  High8.6
• CVE-2020-5425

  User Impersonation possible in Tanzu SSO

  VMware Tanzu · Single Sign-On for VMware Tanzu

  High7.5
• CVE-2020-5419

  RabbitMQ arbitrary code execution using local binary planting

  VMware Tanzu · RabbitMQ

  Medium6.7
• CVE-2020-5415

  Concourse's GitLab auth allows impersonation

  VMware Tanzu · Concourse

  Critical10.0
• CVE-2020-5414

  App Autoscaler logs credentials

  VMware Tanzu · PCF Autoscaling

  Medium5.7
• CVE-2020-5396

  JMX Insecure Default Configuration in GemFire

  VMware Tanzu · VMware Tanzu GemFire for VMs

  High8.8
• CVE-2019-11286

  JMX Credential Deserialization in GemFire

  VMware Tanzu · VMware GemFire

  Critical9.0