UA
Product
User Account And Authentication
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 4Low 0
Watch
Add User Account And Authentication to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-5402 | 8.8 | Feb 27 | In Cloud Foundry UAA, versions prior to 74.14.0, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in the callback function when authenticating with… Affected: before 74.14.0 |
| CVE-2019-11278 | 8.8 | Sep 26 | CF UAA versions prior to 74.1.0, allow external input to be directly queried against Affected: before 74.1.0 |
| CVE-2016-0732 | 8.8 | Sep 7 | The identity zones feature in Pivotal Cloud Foundry 208 through 229; UAA 2.0.0 through 2.7.3 and 3.0.0; UAA-Release 2 through 4, when configured with multiple identity zones; and… Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.1.0; 2.2.0; +27 more |
| CVE-2021-22001 | 7.5 | Jul 22 | In UAA versions prior to 75.3.0, sensitive information like relaying secret of the provider was revealed in response when deletion request of an identity provider( IdP) of type… Affected: before 75.3.0 |
| CVE-2019-11290 | 7.5 | Nov 26 | Cloud Foundry UAA Release, versions prior to v74.8.0, logs all query parameters to tomcat’s access file Affected: before 74.8.0 |
Showing 5