Lucene search

GitHub Advisory DatabaseGHSA-9FRW-WMVQ-5RRC

HistoryMay 13, 2022 - 1:07 a.m.

Cloud Foundry UAA Identity Zone Admin Privilege Escalation

2022-05-1301:07:27

CWE-269

GitHub Advisory Database

github.com

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

6.6 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.9%

JSON

In Cloud Foundry cf-release versions prior to v264; UAA release all versions of UAA v2.x.x, 3.6.x versions prior to v3.6.13, 3.9.x versions prior to v3.9.15, 3.20.x versions prior to v3.20.0, and other versions prior to v4.4.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.17, 24.x versions prior to v24.12. 30.x versions prior to 30.5, and other versions prior to v41, zone administrators are allowed to escalate their privileges when mapping permissions for an external provider.

Affected configurations

Vulners

Node

wso2identity_serverRange<4.4.0

wso2identity_serverRange<3.20.0

wso2identity_serverRange<3.9.15

wso2identity_serverRange<3.6.13

CPENameOperatorVersion
org.cloudfoundry.identity:cloudfoundry-identity-serverlt4.4.0
org.cloudfoundry.identity:cloudfoundry-identity-serverlt3.20.0
org.cloudfoundry.identity:cloudfoundry-identity-serverlt3.9.15
org.cloudfoundry.identity:cloudfoundry-identity-serverlt3.6.13

Name	Operator	Version
org.cloudfoundry.identity:cloudfoundry-identity-server	lt	4.4.0
org.cloudfoundry.identity:cloudfoundry-identity-server	lt	3.20.0
org.cloudfoundry.identity:cloudfoundry-identity-server	lt	3.9.15
org.cloudfoundry.identity:cloudfoundry-identity-server	lt	3.6.13

References

github.com/advisories/GHSA-9frw-wmvq-5rrc

github.com/cloudfoundry/uaa/commit/2c10c43f04cf31e9f8f496cd218bfc773dfc149

github.com/cloudfoundry/uaa/commit/4e4d653edb6b8f68e12b7c415e07e068b1574b8

github.com/cloudfoundry/uaa/commit/aa308c463eaec96704198c2686306c9fc42f126e

github.com/cloudfoundry/uaa/commit/ea8c0ce7740a5d756d9f11964f6a6b4df54cc3b2

nvd.nist.gov/vuln/detail/CVE-2017-8032

www.cloudfoundry.org/cve-2017-8032

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

6.6 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.9%

JSON

Related for GHSA-9FRW-WMVQ-5RRC