CPE Details
Pivotal Software Cloud Foundry UAA Release 26
26
2018-12-01
22h50 +00:00
22h50 +00:00
2018-12-01
22h50 +00:00
22h50 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:pivotal_software:cloudfoundry_uaa_release:26:*:*:*:*:*:*:*
Informations
Vendor
pivotal_softwareProduct
cloudfoundry_uaa_releaseVersion
26Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| Cloud Foundry UAA release, versions prior to v64.0, and UAA, versions prior to 4.23.0, contains a validation error which allows for privilege escalation. A remote authenticated user may modify the url and content of a consent page to gain a token with arbitrary scopes that escalates their privileges. | 9.9 |
Critique |
||
| Cloud Foundry UAA, all versions prior to 4.20.0 and Cloud Foundry UAA Release, all versions prior to 61.0, allows brute forcing of MFA codes. A remote unauthenticated malicious user in possession of a valid username and password can brute force MFA to login as the targeted user. | 9.8 |
Critique |
