Lucene search
Veracode Vulnerability DatabaseVERACODE:5781HistoryFeb 02, 2018 - 1:50 a.m.
Information Disclosure
2018-02-0201:50:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
EPSS
0.001
Percentile
42.8%
uaa-identity is vulnerable to information disclosure. The SessionID is logged in the audit even logs. This allows attackers who can gain access to the logs to impersonate a logged-in user.
References
Related
osv
osv
Cloud Foundry UAA SessionID present in Audit Event Logs
2022-05-14 03:41:29
CVE-2018-1192
2018-02-01 20:29:00
github
github
Cloud Foundry UAA SessionID present in Audit Event Logs
2022-05-14 03:41:29
cve
cve
CVE-2018-1192
2018-02-01 20:29:00
prion
prion
Code injection
2018-02-01 20:29:00
cloudfoundry
cloudfoundry
CVE-2018-1192: UAA SessionID present in Audit Event Logs | Cloud Foundry
2018-01-31 00:00:00
cvelist
cvelist
CVE-2018-1192
2018-02-01 20:00:00
nvd
nvd
CVE-2018-1192
2018-02-01 20:29:00