CVE-2019-11274

概要

参考情報

• cloudfoundry.org/blog/cve-2019-11274 · Vendor Advisory

user account and authentication のその他の脆弱性

• CVE-2021-22098中 6.1UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability. A malicious user can exploit the open redirect vulnera…
• CVE-2021-22001高 7.5In UAA versions prior to 75.3.0, sensitive information like relaying secret of the provider was revealed in response when deletion request o…
• CVE-2020-5402高 8.8In Cloud Foundry UAA, versions prior to 74.14.0, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in the call…
• CVE-2019-11293中 6.5Cloud Foundry UAA Release, versions prior to v74.10.0, when set to logging level DEBUG, logs client_secret credentials when sent as a query …
• CVE-2019-11290高 7.5Cloud Foundry UAA Release, versions prior to v74.8.0, logs all query parameters to tomcat’s access file. If the query parameters are used to…