Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.17 and 1.7.x before 1.7.8, when vCloud or vSphere is used, does not properly enable SSH access for operators, which has unspecified impact and remote attack vectors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Operations_manager | Pivotal_software | * | 1.6.16 (including) |
| Operations_manager | Pivotal_software | 1.7.0 (including) | 1.7.0 (including) |
| Operations_manager | Pivotal_software | 1.7.1 (including) | 1.7.1 (including) |
| Operations_manager | Pivotal_software | 1.7.2 (including) | 1.7.2 (including) |
| Operations_manager | Pivotal_software | 1.7.3 (including) | 1.7.3 (including) |
| Operations_manager | Pivotal_software | 1.7.4 (including) | 1.7.4 (including) |
| Operations_manager | Pivotal_software | 1.7.5 (including) | 1.7.5 (including) |
| Operations_manager | Pivotal_software | 1.7.6 (including) | 1.7.6 (including) |
| Operations_manager | Pivotal_software | 1.7.7 (including) | 1.7.7 (including) |