{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-01T03:09:53.016","vulnerabilities":[{"cve":{"id":"CVE-2019-11292","sourceIdentifier":"security@pivotal.io","published":"2020-01-09T00:15:09.683","lastModified":"2026-06-17T02:12:41.393","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Pivotal Ops Manager, versions 2.4.x prior to 2.4.27, 2.5.x prior to 2.5.24, 2.6.x prior to 2.6.16, and 2.7.x prior to 2.7.5, logs all query parameters to tomcat’s access file. If the query parameters are used to provide authentication, ie. credentials, then they will be logged as well."},{"lang":"es","value":"Pivotal Ops Manager, versiones 2.4.x anteriores a la versión 2.4.27, 2.5.x anteriores a la versión  2.5.24, 2.6.x anteriores a la versión  2.6.16 y 2.7.x anteriores a  la versión 2.7.5, registra todos los parámetros de consulta en tomcatâ € ™ s archivo de acceso. Si los parámetros de consulta se utilizan para proporcionar autenticación, es decir. credenciales, luego se registrarán también."}],"affected":[{"source":"security@pivotal.io","affectedData":[{"vendor":"Pivotal","product":"Pivotal Ops Manager","versions":[{"version":"2.7","lessThan":"2.7.5","versionType":"custom","status":"affected"},{"version":"2.6","lessThan":"2.6.16","versionType":"custom","status":"affected"},{"version":"2.5","lessThan":"2.5.24","versionType":"custom","status":"affected"},{"version":"2.4","lessThan":"2.4.27","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV30":[{"source":"security@pivotal.io","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"security@pivotal.io","type":"Secondary","description":[{"lang":"en","value":"CWE-532"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-532"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:operations_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"2.4.0","versionEndExcluding":"2.4.27","matchCriteriaId":"F5F7096E-702F-476C-8601-D0190A5F8DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:operations_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"2.5.0","versionEndExcluding":"2.5.24","matchCriteriaId":"3E2CE732-CE67-4E97-B18C-0579024E41CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:operations_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.0","versionEndExcluding":"2.6.16","matchCriteriaId":"994739FB-4708-4510-8525-75668696DA75"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:operations_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"2.7.0","versionEndExcluding":"2.7.5","matchCriteriaId":"512AE3F3-5ED4-42E4-801E-8CD26A953908"}]}]}],"references":[{"url":"https://pivotal.io/security/cve-2019-11292","source":"security@pivotal.io","tags":["Vendor Advisory"]},{"url":"https://pivotal.io/security/cve-2019-11292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}