Filtered by vendor Pivotal Software Subscriptions
Filtered by product Bits Service Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2018-15796 1 Pivotal Software 1 Bits Service 2024-11-21 N/A
Cloud Foundry Bits Service Release, versions prior to 2.14.0, uses an insecure hashing algorithm to sign URLs. A remote malicious user may obtain a signed URL and extract the signing key, allowing them complete read and write access to the the Bits Service storage.