Pivotal
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Reactor Netty | 2 | – | Mar 3, 2020 |
| Concourse | 1 | – | May 13, 2020 |
| VMware Tanzu Application Service for VMs | 1 | – | Apr 10, 2020 |
Exploited and recent CVEs
- CVE-2020-5409 Concourse Open Redirect in the /sky/login endpoint 0.9%
- CVE-2020-5406 PCF Autoscaling logs its database credentials 1.0%
- CVE-2020-5403 DoS Via Malformed URL with Reactor Netty HTTP Server 1.2%
- CVE-2020-5404 Authentication Leak On Redirect With Reactor Netty HttpClient 0.7%