AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2018-11045

MEDIUM · CVSS 5.9 EPSS 0.86%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-07-11 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2018-11045
Severity
MEDIUM
CVSS
5.9
EPSS
0.86%
Linux

Original Filing — NVD Description

Pivotal Operations Manager, versions 2.1 prior to 2.1.6 and 2.0 prior to 2.0.15 and 1.12 prior to 1.12.22, contains a static Linux Random Number Generator (LRNG) seed file embedded in the appliance image. An attacker with knowledge of the exact version and IaaS of a running OpsManager could get the contents of the corresponding seed from the published image and therefore infer the initial state of the LRNG.