Lucene search
GoogleOSV:CVE-2018-1262HistoryMay 15, 2018 - 8:29 p.m.
CVE-2018-1262
2018-05-1520:29:00
Google
osv.dev
2
0.001 Low
EPSS
Percentile
42.9%
Cloud Foundry Foundation UAA, versions 4.12.X and 4.13.X, introduced a feature which could allow privilege escalation across identity zones for clients performing offline validation. A zone administrator could configure their zone to issue tokens which impersonate another zone, granting up to admin privileges in the impersonated zone for clients performing offline token validation.
References
Related
cloudfoundry
cloudfoundry
cve
cve
CVE-2018-1262
2018-05-15 20:29:00
nvd
nvd
CVE-2018-1262
2018-05-15 20:29:00
github
github
UAA privilege escalation across identity zones
2022-05-13 01:07:03
veracode
veracode
Privilege Escalation
2018-05-16 03:11:22
prion
prion
Privilege escalation
2018-05-15 20:29:00
osv
osv
UAA privilege escalation across identity zones
2022-05-13 01:07:03
cvelist
cvelist
CVE-2018-1262
2018-05-09 00:00:00