Skip to content
OpenAdvisories

Product · Cloud Foundry

UAA Release

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2019-11293

    UAA logs all query parameters with debug logging level

    Cloud Foundry UAA Release, versions prior to v74.10.0, when set to logging level DEBUG, logs client_secret credentials when sent as a query parameter. A remote authenticated malicious user could gain access to user credentials via the uaa.log file if authenti…

    Cloud Foundry UAA Release
  • High 8.8
    CVE-2019-11290

    Cloud Foundry UAA logs query parameters in tomcat access file

    Cloud Foundry UAA Release, versions prior to v74.8.0, logs all query parameters to tomcat’s access file. If the query parameters are used to provide authentication, ie. credentials, then they will be logged as well.

    Cloud Foundry UAA Release