Lucene search
GoogleOSV:CVE-2019-3775HistoryMar 07, 2019 - 6:29 p.m.
CVE-2019-3775
2019-03-0718:29:00
Google
osv.dev
2
Cloud Foundry UAA, versions prior to v70.0, allows a user to update their own email address. A remote authenticated user can impersonate a different user by changing their email address to that of a different user.
| CPE | Name | Operator | Version |
|---|---|---|---|
| uaa-release | eq | 56 | |
| uaa-release | eq | 67.0 | |
| uaa-release | eq | 10 | |
| uaa-release | eq | 68.0 | |
| uaa-release | eq | 43 | |
| uaa-release | eq | 61.0 | |
| uaa-release | eq | 11.1 | |
| uaa-release | eq | 13 | |
| uaa-release | eq | 2 | |
| uaa-release | eq | 30.1 |
References
Related
cloudfoundry
cloudfoundry
prion
prion
Code injection
2019-03-07 18:29:00
cve
cve
CVE-2019-3775
2019-03-07 18:29:00
nvd
nvd
CVE-2019-3775
2019-03-07 18:29:00
cvelist
cvelist
CVE-2019-3775 UAA allows users to modify their own email address
2019-02-26 00:00:00