Lucene search
PRIOn knowledge basePRION:CVE-2019-11290HistoryNov 26, 2019 - 12:15 a.m.
Authentication flaw
2019-11-2600:15:00
PRIOn knowledge base
www.prio-n.com
5
Cloud Foundry UAA Release, versions prior to v74.8.0, logs all query parameters to tomcat’s access file. If the query parameters are used to provide authentication, ie. credentials, then they will be logged as well.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cf-deployment | lt | 12.10.0 | |
| user_account_and_authentication | lt | 74.8.0 |
References
Related
osv
osv
CVE-2019-11290
2019-11-26 00:15:11
cvelist
cvelist
CVE-2019-11290 Cloud Foundry UAA logs query parameters in tomcat access file
2019-11-21 00:00:00
nvd
nvd
CVE-2019-11290
2019-11-26 00:15:11
cloudfoundry
cloudfoundry
cve
cve
CVE-2019-11290
2019-11-26 00:15:11
symantec
symantec