Lucene search
PRIOn knowledge basePRION:CVE-2019-11282HistoryOct 23, 2019 - 4:15 p.m.
Sql injection
2019-10-2316:15:00
PRIOn knowledge base
www.prio-n.com
3
Cloud Foundry UAA, versions prior to v74.3.0, contains an endpoint that is vulnerable to SCIM injection attack. A remote authenticated malicious user with scim.invite scope can craft a request with malicious content which can leak information about users of the UAA.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cf-deployment | lt | 12.2.0 | |
| cloud_foundry_uaa | lt | 74.3.0 |
References
Related
veracode
veracode
Information Disclosure
2019-10-29 06:58:09
osv
osv
CVE-2019-11282
2019-10-23 16:15:11
nvd
nvd
CVE-2019-11282
2019-10-23 16:15:11
cve
cve
CVE-2019-11282
2019-10-23 16:15:11
symantec
symantec
Cloud Foundry UAA CVE-2019-11282 Information Disclosure Vulnerability
2019-10-22 00:00:00
cvelist
cvelist
cloudfoundry
cloudfoundry