CF
Product
Cloud Foundry Uaa-release
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 3Low 0
Watch
Add Cloud Foundry Uaa-release to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-3787 | 8.8 | Jun 19 | Cloud Foundry UAA, versions prior to 73.0.0, falls back to appending “unknown.org” to a user's email address when one is not provided and the user name does not contain an @… Affected: before 73.0.0 |
| CVE-2018-15754 | 8.8 | Dec 13 | Cloud Foundry UAA, versions 60 prior to 66.0, contain an authorization logic error Affected: 60.0 before 66.0 |
| CVE-2018-1192 | 8.8 | Feb 1 | In Cloud Foundry Foundation cf-release versions prior to v285; cf-deployment versions prior to v1.7; UAA 4.5.x versions prior to 4.5.5, 4.8.x versions prior to 4.8.3, and 4.7.x… Affected: 45.7; 52.7; 53.3 |
| CVE-2017-4963 | 8.1 | Jun 13 | An issue was discovered in Cloud Foundry Foundation Cloud Foundry release v252 and earlier versions, UAA stand-alone release v2.0.0 - v2.7.4.12 & v3.0.0 - v3.11.0, and UAA bosh… Affected: through 26 |
| CVE-2018-1262 | 7.2 | May 15 | Cloud Foundry Foundation UAA, versions 4.12.X and 4.13.X, introduced a feature which could allow privilege escalation across identity zones for clients performing offline… Affected: 57; 57.1; 58 |
Showing 5