Advisories · Technology

Cloud Foundry UAA Release.

Every CVE that names Cloud Foundry UAA Release among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2019-11293 CVE record

CVSS 8.8 High

UAA logs all query parameters with debug logging level
- Cloud Foundry UAA Release
- Information disclosure
Not analysed yet 6 Dec 2019
CVE-2019-11290 CVE record

CVSS 8.8 High

Cloud Foundry UAA logs query parameters in tomcat access file
- Cloud Foundry UAA Release
- Information disclosure
Not analysed yet 25 Nov 2019
CVE-2019-11282 CVE record

CVSS 4.3 Medium

UAA is vulnerable to a Blind SCIM injection leading to information disclosure
- Cloud Foundry UAA Release
- Cloud Foundry CF Deployment
- Information disclosure
Not analysed yet 23 Oct 2019
CVE-2018-15754 CVE record

CVSS 4.2 Medium

UAA can issue tokens across identity providers if users with matching usernames exist
- Cloud Foundry UAA Release
Not analysed yet 13 Dec 2018
CVE-2018-11082 CVE record

CVSS 6.6 Medium

Cloud Foundry UAA MFA does not prevent brute force of MFA code
- Cloud Foundry UAA Release
- Cloud Foundry UAA
Not analysed yet 5 Oct 2018