Skip to content
OpenAdvisories

Product · Cloud Foundry

UUA

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.6

    Cloud Foundry UAA SAML 2.0 Signature Bypass

    Cloud Foundry UUA is vulnerable to a bypass that allows an attacker to obtain a token for any user and gain access to UAA-protected systems. This vulnerability exists when SAML 2.0 bearer assertions are enabled for a client, as the UAA accepts SAML 2.0 bearer…