Pivotal Scheduler
1 CVEs
product
Monthly
Scheduler for TAS prior to version 1.4.0 was permitting plaintext transmission of UAA client token by sending it over a non-TLS connection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Information Disclosure
Pivotal Scheduler
NVD
CVSS 3.1
9.8
EPSS
0.7%
EPSS 1%
CVSS 9.8
CRITICAL
Act Now
Scheduler for TAS prior to version 1.4.0 was permitting plaintext transmission of UAA client token by sending it over a non-TLS connection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Information Disclosure
Pivotal Scheduler
NVD