CVE-2016-0930

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-09-18 · updated 2026-06-17
Weakness: CWE-362

Description

Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.19 and 1.7.x before 1.7.10, when vCloud or vSphere is used, has a default password for compilation VMs, which allows remote attackers to obtain SSH access by connecting within an installation-time period during which these VMs exist.

Affected products

Pivotal Operations Manager: through 1.6.18; 1.7.0, 1.7.1, 1.7.2, 1.7.3, 1.7.4, 1.7.5 (+4)

References

http://www.securityfocus.com/bid/93027
https://pivotal.io/security/cve-2016-0930
http://www.securityfocus.com/bid/93027
https://pivotal.io/security/cve-2016-0930

Get alerted when CVE-2016-0930 or the next vulnerability affects your stack