Product Release Advisory - Single Sign-On for VMware Tanzu Application Service 1.16.11

Tanzu Kubernetes Runtime

5 more products

35983

24 July 2025

24 July 2025

CLOSED

MEDIUM

6.5

N/A

See CVE list in advisory

Product Release Advisory - Single Sign-On for VMware Tanzu Application Service 1.16.11

 

 

Advisory Details

Severity

Medium

CVSSv3 Range

6.5

CVSSv3 Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Issue Date

2025-07-24

Updated on

 

 

Product Version Release Advisory

 

 

Security Fixes This release has the following security fixes, listed by component and area.

 

Component

Vulnerabilities Resolved

identity_service_broker

BDSA-2025-5233 (CVE-2025-48988)
(Medium)

identity_service_broker

BDSA-2025-5234 (CVE-2025-49124) 
(Medium)

identity_service_broker

BDSA-2025-5235 (CVE-2025-49125) 
(Medium)

identity_service_broker

BDSA-2025-5150 (CVE-2025-41234) 
(Medium)