Cloud Foundry UAA versions prior to v73.4.0 contain a vulnerability where a malicious client possessing the 'clients.write' authority or scope can byp...

References

• advisory https://pivotal.io/security/cve-2019-11270
• advisory https://www.cloudfoundry.org/blog/cve-2019-11270