Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2015-3190

With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier the UAA logout link is s

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
dell

Description

With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier the UAA logout link is susceptible to an open redirect which allows an attacker to insert malicious web page as a redirect parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Pivotal Cloud Foundry

  • Runtime cf-release versions v209 or earlieraffected
  • UAA Standalone versions 2.2.6 or earlieraffected
  • Runtime 1.4.5 or earlieraffected

References