CVE-2018-1200

Apps Manager for PCF (Pivotal Application Service 1.11.x before 1.11.26, 1.12.x before 1.12.14, and 2.0.x before 2.0.5) allows unprivileged remote file read in its container via specially-crafted links.

• CWE-200

• http://www.securityfocus.com/bid/103042Third Party Advisory, VDB Entry
• https://pivotal.io/security/cve-2018-1200Vendor Advisory
• http://www.securityfocus.com/bid/103042Third Party Advisory, VDB Entry
• https://pivotal.io/security/cve-2018-1200Vendor Advisory

Published

Mar 16, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11994SMMU secure camera logic allows secure camera controllers to…
• CVE-2018-11995In all android releases(Android for MSM, Firefox OS for MSM,…
• CVE-2018-11996When a malformed command is sent to the device programmer, a…
• CVE-2018-11997Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-11998While processing a packet decode request in MQTT, Race condi…
• CVE-2018-11999Improper input validation in trustzone can lead to denial of…
• CVE-2018-12000Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-12001Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-12002Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-12003Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-12004Secure keypad is unlocked with secure display still intact i…
• CVE-2018-12005An unprivileged user can issue a binder call and cause a sys…