Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2019-11290

Cloud Foundry UAA logs query parameters in tomcat access file

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
pivotal

Description

Cloud Foundry UAA Release, versions prior to v74.8.0, logs all query parameters to tomcat’s access file. If the query parameters are used to provide authentication, ie. credentials, then they will be logged as well.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cloud Foundry UAA Release

  • All to < v74.8.0affected

References