Skip to content
CVE PROGRAM SOURCE RECORD9.9 Critical

CVE-2018-15761

UAA Privilege Escalation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
dell

Description

Cloud Foundry UAA release, versions prior to v64.0, and UAA, versions prior to 4.23.0, contains a validation error which allows for privilege escalation. A remote authenticated user may modify the url and content of a consent page to gain a token with arbitrary scopes that escalates their privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cloud Foundry UAA

  • all versions to < 4.23.0affected

Cloud Foundry UAA Release

  • all versions to < 64.0affected

References