[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$frZjvzkdlEPCvITS_u7NPNCOUHczfr-AC82WTHSHcMTg":3,"g5a-risk:CVE-2019-3790":140},{"success":4,"data":5,"meta":138},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":49,"epssPercentile":15,"epssTimeSeries":50,"severity":51,"affectedProducts":52,"affectedProductsCount":58,"references":59,"referencesCount":71,"weaknesses":72,"weaknessesCount":71,"isActivelyExploited":87,"cisaInfo":15,"otxData":15,"relatedBlogPosts":88,"seoMetadata":89,"configurations":114,"relatedVendorCves":136,"notableEvents":137},"CVE-2019-3790","What is CVE-2019-3790?","The Pivotal Ops Manager, 2.2.x versions prior to 2.2.23, 2.3.x versions prior to 2.3.16, 2.4.x versions prior to 2.4.11, and 2.5.x versions prior to 2.5.3, contain configuration that circumvents refresh token expiration. A remote authenticated user can gain access to a browser session that was supposed to have expired, and access Ops Manager resources.","The Pivotal Ops Manager, 2.2.x versions prior to 2.2.23, 2.3.x versions prior to 2.3.16, 2.4.x versions prior to 2.4.11, and 2.5.x versions prior to 2.5.3, c...","2019-06-06T19:29:00.783","2019-10-09T23:49:39.663",5.4,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":39,"CVSSMetricV40":15},null,[17,29],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",2.8,2.5,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":37,"ImpactScore":38},"security_alert@emc.com","Secondary",{"Version":21,"VectorString":33,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":34,"UserInteraction":35,"Scope":25,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":24,"BaseScore":36,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N","HIGH","REQUIRED",6.1,0.9,5.2,[40],{"Source":18,"Type":19,"CVSSData":41,"BaseSeverity":26,"ExploitabilityScore":47,"ImpactScore":48,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":42,"VectorString":43,"AccessVector":22,"AccessComplexity":23,"Authentication":44,"ConfidentialityImpact":45,"IntegrityImpact":45,"AvailabilityImpact":24,"BaseScore":46,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:N","SINGLE","PARTIAL",5.5,8,4.9,0.00651,[49,49,49,49,49,49,49],"Medium",[53],{"vendor":54,"product":55,"version":56,"criteria":57,"vulnerable":4},"pivotal_software","operations_manager","*","cpe:2.3:a:pivotal_software:operations_manager:*:*:*:*:*:*:*:*",1,[60,66],{"url":61,"source":62,"tags":63},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F108512","Securityfocus",[64,65],"Third Party Advisory","VDB Entry",{"url":67,"source":68,"tags":69},"https:\u002F\u002Fpivotal.io\u002Fsecurity\u002Fcve-2019-3790","Pivotal",[70],"Vendor Advisory",2,[73,81],{"id":74,"name":75,"description":76,"extendedDescription":77,"status":78,"abstraction":79,"structure":80},"CWE-324","Use of a Key Past its Expiration Date","The product uses a cryptographic key or password past its expiration date, which diminishes its safety significantly by increasing the timing window for cracking attacks against that key.","While the expiration of keys does not necessarily ensure that they are compromised, it is a significant concern that keys which remain in use for prolonged periods of time have a decreasing probability of integrity. For this reason, it is important to replace keys within a period of time proportional to their strength.","Draft","Base","Simple",{"id":82,"name":83,"description":84,"extendedDescription":85,"status":86,"abstraction":79,"structure":80},"CWE-613","Insufficient Session Expiration","According to WASC, \"Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization.\"","","Incomplete",false,[],{"title":90,"metaDescription":91,"keywords":92,"canonicalUrl":93,"structuredData":94},"What is CVE-2019-3790? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-3790, a medium severity cyber security vulnerability from 2019. The Pivotal Ops Manager, 2.2.x versions prior to 2.2.23, 2...","CVE-2019-3790, CVE-2019-3790 vulnerability, CVE-2019-3790 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, pivotal_software security, operations_manager vulnerability","\u002Fwhat-is\u002Fcve-2019-3790",{"@context":95,"@type":96,"headline":90,"description":91,"datePublished":10,"dateModified":11,"author":97,"publisher":101,"about":105,"mainEntityOfPage":109,"articleSection":112,"keywords":113},"https:\u002F\u002Fschema.org","TechArticle",{"@type":98,"name":99,"url":100},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":98,"name":99,"url":100,"logo":102},{"@type":103,"url":104},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":106,"name":6,"description":107,"additionalType":108},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":110,"@id":111},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-3790","Cybersecurity","CVE-2019-3790, CVE-2019-3790 vulnerability, CVE-2019-3790 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[115],{"Operator":15,"Negate":15,"Nodes":116},[117],{"Operator":118,"Negate":15,"CPEMatch":119},"OR",[120,124,128,132],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":121,"VersionStartExcluding":15,"VersionStartIncluding":122,"VersionEndExcluding":123,"VersionEndIncluding":15},"7FC149AE-880F-4995-8F68-E93EA9E25B0D","2.2.0","2.2.23",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":125,"VersionStartExcluding":15,"VersionStartIncluding":126,"VersionEndExcluding":127,"VersionEndIncluding":15},"21C2E924-03FF-40F2-ADD6-BD6557170F45","2.3.0","2.3.16",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":129,"VersionStartExcluding":15,"VersionStartIncluding":130,"VersionEndExcluding":131,"VersionEndIncluding":15},"4DF98531-7260-4A37-9A69-2F568AC8105B","2.4.0","2.4.11",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":133,"VersionStartExcluding":15,"VersionStartIncluding":134,"VersionEndExcluding":135,"VersionEndIncluding":15},"0F238AF7-C3FD-4FAD-943C-196CD520518D","2.5.0","2.5.3",[],[],{"lastModified":11,"cacheTime":139,"version":42},1792450254388,{"score":141,"band":142,"action":143,"scoredAt":144},24,"Low","Monitor","2026-10-19T07:00:18.916167+00:00"]