Read the docs

CloudFoundry Foundation

Records118All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical11CVSS 9.0–10.0
CVSS high64CVSS 7.0–8.9

Exploited now

CloudFoundry Foundation records in CISA KEV

No CloudFoundry Foundation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cf-deployment 37 records MEDIUM Cf-release 35 records MEDIUM Capi-release 22 records MEDIUM Cloud Foundry Uaa Bosh 15 records MEDIUM User Account And Authentication 9 records MEDIUM Routing-release 8 records MEDIUM Routing Release 5 records LOW Uaa Release 5 records MEDIUM

Records

9 records in User Account And Authentication · all components

TI-2019-08436 CVE-2019-11278 · GHSA-6c72-gqp5-jh4r

Privilege Escalation via Blind SCIM Injection in UAA

Priority MEDIUM 41

CF UAA versions prior to 74.1.0, allow external input to be directly queried against.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01342 Published 2019-09-26 Fixed in 74.1.0 CWE-77
TI-2016-00656 CVE-2016-0732 · GHSA-4987-rr6v-x4q5

The identity zones feature in Pivotal Cloud Foundry 208 through 229; UAA 2.0.0 through…

Priority MEDIUM 40

The identity zones feature in Pivotal Cloud Foundry 208 through 229; UAA 2.0.0 through 2.7.3 and 3.0.0; UAA-Release 2 through 4, when configured with multiple identity zones; and Elastic Runtime 1.6.0 through 1.6.13 allo…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01154 Published 2017-09-07 No fix listed CWE-269
TI-2020-04448 CVE-2020-5402 · GHSA-5fqw-8f7q-58m9

UAA fails to check the state parameter when authenticating with external IDPs

Priority LOW 39

In Cloud Foundry UAA, versions prior to 74.14.0, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in the callback function when authenticating with external identity providers.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00486 Published 2020-02-27 Fixed in v74.14.0 CWE-352
TI-2021-05045 CVE-2021-22001 · GHSA-8f73-86rh-w9fj

Information disclosure in Cloud Foundry UAA server

Priority LOW 35

In UAA versions prior to 75.3.0, sensitive information like relaying secret of the provider was revealed in response when deletion request of an identity provider( IdP) of type “oauth 1.0” was sent to UAA server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00986 Published 2021-07-22 No fix listed CWE-200
TI-2019-08450 CVE-2019-11293 · GHSA-75vm-6gpr-f398

UAA logs all query parameters with debug logging level

Priority LOW 32

Cloud Foundry UAA Release, versions prior to v74.10.0, when set to logging level DEBUG, logs client_secret credentials when sent as a query parameter.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01316 Published 2019-12-06 Fixed in v74.10.0 CWE-532
TI-2019-08432 CVE-2019-11274 · GHSA-q3c3-832g-jxjc

UAA SCIM Filter XSS

Priority LOW 29

Cloud Foundry UAA, versions prior to 74.0.0, is vulnerable to an XSS attack.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2019-08-09 Fixed in v74.0.0 CWE-79
TI-2021-05101 CVE-2021-22098 · GHSA-gmmg-mg5x-45rp

Open redirect in UAA server

Priority LOW 28

UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00712 Published 2021-08-11 No fix listed CWE-601
TI-2023-07318 CVE-2023-20903 · GHSA-5rqc-wqwj-478f

Insufficient session expiration in Cloud Foundry

Priority LOW 20

This disclosure regards a vulnerability related to UAA refresh tokens and external identity providers.Assuming that an external identity provider is linked to the UAA, a refresh token is issued to a client on behalf of a…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00404 Published 2023-03-28 No fix listed CWE-613
Open these records in search →