| Package | Affected versions | Patched versions |
|---|---|---|
| org.cloudfoundry.identity:cloudfoundry-identity-server | ≥ 3.10.0, < 3.12.0< 3.9.8 | 3.12.03.9.8 |
| cloud foundry uaa bosh | = 21= 22= 23= 24= 24.1= 24.2= 24.3= 24.4= 24.5= 24.6= 25= 26 | |
| cloud foundry | = 247.0= 248.0= 249.0= 250.0= 251.0= 252.0 | |
| cloud foundry uaa | = 3.10.0= 3.11.0= 3.9.0= 3.9.1= 3.9.2= 3.9.3= 3.9.4= 3.9.5= 3.9.6= 3.9.7= 3.9.8 |
An issue was discovered in Cloud Foundry release v247 through v252, UAA stand-alone release v3.9.0 through v3.11.0, and UAA Bosh Release v21 through v26. There is a potential to subject the UAA OAuth clients to a denial of service attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free