Common vulnerabilities and Exposures (CVE)

Skip to main content

Required CVE Record Information

Description

With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier the UAA logout link is susceptible to an open redirect which allows an attacker to insert malicious web page as a redirect parameter.

Product Status

Learn more

Versions 3 Total

Default Status: unknown

affected

  • affected at Runtime cf-release versions v209 or earlier 
  • affected at UAA Standalone versions 2.2.6 or earlier 
  • affected at Runtime 1.4.5 or earlier 

Updated:

This container includes required additional information provided by the CVE Program for this vulnerability.