Lucene search

K
osvGoogleOSV:GHSA-292X-HJR8-226F
HistoryMay 13, 2022 - 1:34 a.m.

Cloud Foundry UAA Privilege Escalation

2022-05-1301:34:08
Google
osv.dev
8
cloud foundry
uaa
privilege escalation
validation error
remote authenticated user
modify consent page
arbitrary scopes

AI Score

6.9

Confidence

Low

EPSS

0.002

Percentile

60.9%

Cloud Foundry UAA release, versions prior to v64.0, and UAA, versions prior to 4.23.0, contains a validation error which allows for privilege escalation. A remote authenticated user may modify the url and content of a consent page to gain a token with arbitrary scopes that escalates their privileges.

AI Score

6.9

Confidence

Low

EPSS

0.002

Percentile

60.9%