Lucene search

GitHub Advisory DatabaseGHSA-J97Q-9XP9-G5FX

HistoryMay 13, 2022 - 1:10 a.m.

Pivotal Cloud Foundry UAA XSS on UAA OpenID Connect check session iframe endpoint

2022-05-1301:10:01

CWE-79

GitHub Advisory Database

github.com

pivotal cloud foundry

uaa

xss

openid connect

iframe

endpoint

vulnerability

single logout

session management

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

40.7%

JSON

An issue was discovered in these Pivotal Cloud Foundry products: all versions prior to cf-release v270, UAA v3.x prior to v3.20.2, and UAA bosh v30.x versions prior to v30.8 and all other versions prior to v45.0. A cross-site scripting (XSS) attack is possible in the clientId parameter of a request to the UAA OpenID Connect check session iframe endpoint used for single logout session management.

Affected configurations

Vulners

Node

org.cloudfoundry.identitycloudfoundry-identity-serverRange3.0.0–3.20.2

VendorProductVersionCPE
org.cloudfoundry.identitycloudfoundry-identity-server*cpe:2.3:a:org.cloudfoundry.identity:cloudfoundry-identity-server:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
org.cloudfoundry.identity	cloudfoundry-identity-server	*	cpe:2.3:a:org.cloudfoundry.identity:cloudfoundry-identity-server::::::::

References

github.com/advisories/GHSA-j97q-9xp9-g5fx

github.com/cloudfoundry/uaa/commit/96fe26711f8f8855d2994a531447f730afd61844

nvd.nist.gov/vuln/detail/CVE-2018-1190

web.archive.org/web/20200227133214/www.securityfocus.com/bid/102427

www.cloudfoundry.org/cve-2018-1190

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

40.7%

JSON

Related for GHSA-J97Q-9XP9-G5FX