CVE-2019-11274

Mô tả

Tham khảo

• cloudfoundry.org/blog/cve-2019-11274 · Vendor Advisory

Lỗ hổng khác của user account and authentication

• CVE-2021-22098TRUNG BÌNH 6.1UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability. A malicious user can exploit the open redirect vulnera…
• CVE-2021-22001CAO 7.5In UAA versions prior to 75.3.0, sensitive information like relaying secret of the provider was revealed in response when deletion request o…
• CVE-2020-5402CAO 8.8In Cloud Foundry UAA, versions prior to 74.14.0, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in the call…
• CVE-2019-11293TRUNG BÌNH 6.5Cloud Foundry UAA Release, versions prior to v74.10.0, when set to logging level DEBUG, logs client_secret credentials when sent as a query …
• CVE-2019-11290CAO 7.5Cloud Foundry UAA Release, versions prior to v74.8.0, logs all query parameters to tomcat’s access file. If the query parameters are used to…