CVE-2016-0930: Pivotal Operations Manager

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.19 and 1.7.x before 1.7.10, when vCloud or vSphere is used, has a default password for compilation VMs, which allows remote attackers to obtain SSH access by connecting within an installation-time period during which these VMs exist.

Affected products

• Pivotal Operations Manager: up to and including 1.6.18; version 1.7.0 only; version 1.7.1 only; version 1.7.2 only; version 1.7.3 only; version 1.7.4 only; …

Published 2016-09-18. Last modified 2026-06-17.