Unrated

Cloud Foundry UAA, versions prior to v73.4.0, does not set an X-FRAME-OPTIONS header on various endpoints. A remote user can perform clickjacking atta...

CVE-2019-3794 First seen on SecPulse Jul 19, 2019

Original description The description as published by the source.

Cloud Foundry UAA, versions prior to v73.4.0, does not set an X-FRAME-OPTIONS header on various endpoints. A remote user can perform clickjacking attacks on UAA's frontend sites.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory cloudfoundry.org

Key facts

Severity: Unrated
Published: Jul 19, 2019
First seen on SecPulse: Jul 19, 2019

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:52