Skip to content
CVE PROGRAM SOURCE RECORD3.9 Low

CVE-2024-38806

UAA Failure to Remove Shadow User’s Access

Description

Failure to properly synchronize user's permissions in UAA in Cloud Foundry Foundation v40.17.0 https://github.com/cloudfoundry/cf-deployment/releases/tag/v40.17.0 , potentially resulting in users retaining access rights they should not have. This can allow them to perform operations beyond their intended permissions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a UAA

Default version status: unaffected

  • v77.10.0 and belowaffected

References