Comparison Using Wrong Factors

Overview org.cloudfoundry.identity:cloudfoundry-identity-server is a Cloud Foundry User Account and Authentication UAA Server. Affected versions of this package are vulnerable to Comparison Using Wrong Factors due to a logic error in the token revocation endpoint implementation. An attacker can...

org.cloudfoundry.identity:cloudfoundry-identity-api (>=3.0.0, <=4.11.0), org.cloudfoundry.identity:cloudfoundry-identity-app (>=3.0.0, <=4.11.0) +1 more potentially affected by CVE-2024-38806 via org.cloudfoundry.identity:cloudfoundry-identity-server (>=3.0.0, <=4.30.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =4.30.0 Source cves: CVE-2024-38806 Source advisory: MEND:CVE-2024-38806...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.4.3), org.cloudfoundry.identity:cloudfoundry-identity-app (3.4.3) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.4.3)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-api...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.6.0), org.cloudfoundry.identity:cloudfoundry-identity-app (3.6.0) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.6.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-api...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.7.3), org.cloudfoundry.identity:cloudfoundry-identity-app (3.7.3) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.7.3)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-api...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.10.0), org.cloudfoundry.identity:cloudfoundry-identity-app (3.10.0) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.10.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-ap...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.12.0), org.cloudfoundry.identity:cloudfoundry-identity-app (3.12.0) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.12.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-ap...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.15.0), org.cloudfoundry.identity:cloudfoundry-identity-app (3.15.0) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.15.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-ap...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.16.0), org.cloudfoundry.identity:cloudfoundry-identity-app (3.16.0) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.16.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-ap...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.18.0), org.cloudfoundry.identity:cloudfoundry-identity-app (3.18.0) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.18.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-ap...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.19.0), org.cloudfoundry.identity:cloudfoundry-identity-app (3.19.0) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.19.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-ap...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.20.0), org.cloudfoundry.identity:cloudfoundry-identity-app (3.20.0) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.20.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-ap...

org.cloudfoundry.identity:cloudfoundry-identity-api (>=4.1.0, <=4.5.0), org.cloudfoundry.identity:cloudfoundry-identity-app (>=4.1.0, <=4.5.0) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (>=4.1.0, <=4.5.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version =4.1.0, =4.1.0, =4.1.0, =4.1.0, =4.5.0 Source cves: CVE-2018-1192 Source advisory: OSV:GHSA-XG5V-696H-C3VR...

org.cloudfoundry.identity:cloudfoundry-identity-api (>=4.1.0, <=4.5.0), org.cloudfoundry.identity:cloudfoundry-identity-app (>=4.1.0, <=4.5.0) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (>=4.1.0, <=4.5.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version =4.1.0, =4.1.0, =4.1.0, =4.1.0, =4.5.0 Source cves: CVE-2018-1192 Source advisory: GHSA-XG5V-696H-C3VR...

org.cloudfoundry.identity:cloudfoundry-identity-api (>=4.6.0, <=4.7.2), org.cloudfoundry.identity:cloudfoundry-identity-app (>=4.6.0, <=4.7.2) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (>=4.6.0, <=4.7.2)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version =4.6.0, =4.6.0, =4.6.0, =4.6.0, =4.7.2 Source cves: CVE-2018-1192 Source advisory: OSV:GHSA-XG5V-696H-C3VR...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.0.0), org.cloudfoundry.identity:cloudfoundry-identity-app (3.0.0) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.0.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-api...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.1.0), org.cloudfoundry.identity:cloudfoundry-identity-app (3.1.0) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.1.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-api...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.2.0), org.cloudfoundry.identity:cloudfoundry-identity-app (3.2.0) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.2.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-api...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.3.0), org.cloudfoundry.identity:cloudfoundry-identity-app (3.3.0) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.3.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-api...

org.cloudfoundry.identity:cloudfoundry-identity-api (3.3.0.5), org.cloudfoundry.identity:cloudfoundry-identity-app (3.3.0.5) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (3.3.0.5)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 3.3.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-a...