Non évaluée
CF UAA versions prior to 74.1.0 can request scopes for a client that shouldn't be allowed by submitting an array of requested scopes. A remote malicio...
CVE-2019-11279
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
CF UAA versions prior to 74.1.0 can request scopes for a client that shouldn't be allowed by submitting an array of requested scopes. A remote malicious user can escalate their own privileges to any scope, allowing them to take control of UAA and the resources it controls.
Références
- advisory cloudfoundry.org