CVE-2019-11270

2019-08-0517:15:10

Google

osv.dev

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.2%

JSON

Cloud Foundry UAA versions prior to v73.4.0 contain a vulnerability where a malicious client possessing the ‘clients.write’ authority or scope can bypass the restrictions imposed on clients created via ‘clients.write’ and create clients with arbitrary scopes that the creator does not possess.

CPENameOperatorVersion
uaaeq71.0
uaaeq6
uaaeq19
uaaeq33
uaaeq41
uaaeq58
uaaeq20
uaaeq27
uaaeq22
uaaeq73.3.0

Name	Operator	Version
uaa	eq	71.0
uaa	eq	6
uaa	eq	19
uaa	eq	33
uaa	eq	41
uaa	eq	58
uaa	eq	20
uaa	eq	27
uaa	eq	22
uaa	eq	73.3.0

Rows per page:

1-10 of 701

References

pivotal.io/security/cve-2019-11270

www.cloudfoundry.org/blog/cve-2019-11270