CF
Product
Cloud Foundry Uaa-release
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 3Low 0
Watch
Add Cloud Foundry Uaa-release to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-3787 | 8.8 | Jun 19 | Cloud Foundry UAA, versions prior to 73.0.0, falls back to appending “unknown.org” to a user's email address when one is not provided and the user name does not contain an @… Affected: before 73.0.0 |
| CVE-2018-15754 | 8.8 | Dec 13 | Cloud Foundry UAA, versions 60 prior to 66.0, contain an authorization logic error Affected: 60.0 before 66.0 |
| CVE-2018-1192 | 8.8 | Feb 1 | In Cloud Foundry Foundation cf-release versions prior to v285; cf-deployment versions prior to v1.7; UAA 4.5.x versions prior to 4.5.5, 4.8.x versions prior to 4.8.3, and 4.7.x… Affected: 45.7; 52.7; 53.3 |
| CVE-2017-4963 | 8.1 | Jun 13 | An issue was discovered in Cloud Foundry Foundation Cloud Foundry release v252 and earlier versions, UAA stand-alone release v2.0.0 - v2.7.4.12 & v3.0.0 - v3.11.0, and UAA bosh… Affected: through 26 |
| CVE-2018-1262 | 7.2 | May 15 | Cloud Foundry Foundation UAA, versions 4.12.X and 4.13.X, introduced a feature which could allow privilege escalation across identity zones for clients performing offline… Affected: 57; 57.1; 58 |
| CVE-2018-11041 | 6.1 | Jun 25 | Cloud Foundry UAA, versions later than 4.6.0 and prior to 4.19.0 except 4.10.1 and 4.7.5 and uaa-release versions later than v48 and prior to v60 except v55.1 and v52.9, does not… Affected: after 48 before 52.9; after 52.9 before 55.1; after 55.1 before 60 |
| CVE-2016-5016 | 5.9 | Apr 24 | Pivotal Cloud Foundry 239 and earlier, UAA (aka User Account and Authentication Server) 3.4.1 and earlier, UAA release 12.2 and earlier, PCF (aka Pivotal Cloud Foundry) Elastic… Affected: through 12.2 |
| CVE-2019-11268 | 4.3 | Jul 11 | Cloud Foundry UAA version prior to 73.3.0, contain endpoints that contains improper escaping Affected: before 73.3.0 |
Showing 8