Skip to content
OpenAdvisories
Unscored CVE-2015-3190 EUVD-2015-3258GHSA-97vp-h7v5-7hcw

With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Cloud Foundry Runtime …

Published May 25, 2017 · Updated Aug 6, 2024 · Assigned by dell

Vendor: Pivotal Product: Cloud Foundry

Description

With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier the UAA logout link is susceptible to an open redirect which allows an attacker to insert malicious web page as a redirect parameter.

Affected products

VendorProductAffectedFixed
Pivotal Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier, Runtime 1.4.5 or earlier —

References