CVE-2019-3794

概要

参考情報

• cloudfoundry.org/blog/cve-2019-3794 · Vendor Advisory

cloud foundry uaa のその他の脆弱性

• CVE-2019-11282中 4.3Cloud Foundry UAA, versions prior to v74.3.0, contains an endpoint that is vulnerable to SCIM injection attack. A remote authenticated malic…
• CVE-2019-11270高 7.5Cloud Foundry UAA versions prior to v73.4.0 contain a vulnerability where a malicious client possessing the 'clients.write' authority or sco…
• CVE-2018-15761高 8.8Cloud Foundry UAA release, versions prior to v64.0, and UAA, versions prior to 4.23.0, contains a validation error which allows for privileg…
• CVE-2018-11047高 7.5Cloud Foundry UAA, versions 4.19 prior to 4.19.2 and 4.12 prior to 4.12.4 and 4.10 prior to 4.10.2 and 4.7 prior to 4.7.6 and 4.5 prior to 4…
• CVE-2018-11041中 6.1Cloud Foundry UAA, versions later than 4.6.0 and prior to 4.19.0 except 4.10.1 and 4.7.5 and uaa-release versions later than v48 and prior t…