CVE-2019-3787 UAA defaults email address to an insecure domain

2019-05-1400:00:00

CWE-840

dell

www.cve.org

8.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.8%

JSON

Cloud Foundry UAA, versions prior to 73.0.0, falls back to appending “unknown.org” to a user’s email address when one is not provided and the user name does not contain an @ character. This domain is held by a private company, which leads to attack vectors including password recovery emails sent to a potentially fraudulent address. This would allow the attacker to gain complete control of the user’s account.

CNA Affected

[
  {
    "product": "UAA Release (OSS)",
    "vendor": "Cloud Foundry",
    "versions": [
      {
        "lessThan": "v73.0.0",
        "status": "affected",
        "version": "All",
        "versionType": "custom"
      }
    ]
  }
]