| Package | Affected versions | Patched versions |
|---|---|---|
| cloud foundry uaa-release | ≥ 60.0, < 66.0 | 66.0 |
Cloud Foundry UAA, versions 60 prior to 66.0, contain an authorization logic error. In environments with multiple identity providers that contain accounts across identity providers with the same username, a remote authenticated user with access to one of these accounts may be able to obtain a token for an account of the same username in the other identity provider.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free