HIGH🇬🇧 English

CVE-2021-22001

CVSS 7.5v3.1pub. 2021-07-22upd. 2024-11-21

In UAA versions prior to 75.3.0, sensitive information like relaying secret of the provider was revealed in response when deletion request of an identity provider( IdP) of type “oauth 1.0” was sent to UAA server.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Cloudfoundry Cf Deployment

    APP
    Cloudfoundry
    < 16.18.0

  • Cloudfoundry User Account And Authentication

    APP
    Cloudfoundry
    < 75.3.0
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2022-31733CRITICAL9.1ten sam produkt

Starting with diego-release 2.55.0 and up to 2.69.0, and starting with CF Deployment 17.1 and up to 23.2.0, ap...

CVE-2019-3801CRITICAL9.8ten sam produkt

Cloud Foundry cf-deployment, versions prior to 7.9.0, contain java components that are using an insecure proto...

CVE-2023-20881HIGH8.1ten sam produkt

Cloud foundry instances having CAPI version between 1.140 and 1.152.0 along with loggregator-agent v7+ may ove...

CVE-2021-22101HIGH7.5ten sam produkt

Cloud Controller versions prior to 1.118.0 are vulnerable to unauthenticated denial of Service(DoS) vulnerabil...

CVE-2020-5423HIGH7.5ten sam produkt

CAPI (Cloud Controller) versions prior to 1.101.0 are vulnerable to a denial-of-service attack in which an una...