org.cloudfoundry.identity:cloudfoundry-identity-api (3.0.0), org.cloudfoundry.identity:cloudfoundry-identity-app (3.0.0) +1 more potentially affected by CVE-2018-15761 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.0.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-api...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.4.4), org.cloudfoundry.identity:cloudfoundry-identity-app (3.4.4) +1 more potentially affected by CVE-2018-15761 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.4.4)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-api...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.12.0), org.cloudfoundry.identity:cloudfoundry-identity-app (3.12.0) +1 more potentially affected by CVE-2018-15761 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.12.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-ap...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.15.0), org.cloudfoundry.identity:cloudfoundry-identity-app (3.15.0) +1 more potentially affected by CVE-2018-15761 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.15.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-ap...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.19.0), org.cloudfoundry.identity:cloudfoundry-identity-app (3.19.0) +1 more potentially affected by CVE-2018-15761 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.19.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-ap...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.9.0), org.cloudfoundry.identity:cloudfoundry-identity-app (3.9.0) +1 more potentially affected by CVE-2018-15761 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.9.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-api...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.16.0), org.cloudfoundry.identity:cloudfoundry-identity-app (3.16.0) +1 more potentially affected by CVE-2018-15761 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.16.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-ap...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.2.1), org.cloudfoundry.identity:cloudfoundry-identity-app (3.2.1) +1 more potentially affected by CVE-2018-15761 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.2.1)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-api...

Security Bulletin: A Security Vulnerability affects IBM Cloud Private Cloud Foundry (CVE-2018-15761)

Summary A security vulnerability affects IBM Cloud Private Cloud Foundry Vulnerability Details CVEID: CVE-2018-15761 DESCRIPTION: Cloud Foundry UAA release could allow a remote authenticated attacker to gain elevated privileges on the system, caused by improper input validation. By modifying the...

CVE-2018-15761

Cloud Foundry UAA includes a privilege-escalation vulnerability in releases prior to v64.0 and in UAA prior to 4.23.0. A validated error lets a remote authenticated attacker modify the URL and content of the consent page to obtain a token with arbitrary scopes, escalating privileges. Exploitation...