CVE-2015-3190

2017-05-2517:00:00

dell

www.cve.org

EPSS

0.001

Percentile

38.3%

JSON

With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier the UAA logout link is susceptible to an open redirect which allows an attacker to insert malicious web page as a redirect parameter.

CNA Affected

[
  {
    "product": "Cloud Foundry",
    "vendor": "Pivotal",
    "versions": [
      {
        "status": "affected",
        "version": "Runtime cf-release versions v209 or earlier"
      },
      {
        "status": "affected",
        "version": "UAA Standalone versions 2.2.6 or earlier"
      },
      {
        "status": "affected",
        "version": "Runtime 1.4.5 or earlier"
      }
    ]
  }
]

References

pivotal.io/security/cve-2015-3190

EPSS

0.001

Percentile

38.3%

JSON

Related for CVELIST:CVE-2015-3190