org.cloudfoundry:cf-gradle-plugin (>=1.0.1, <=1.0.3), org.cloudfoundry:cf-maven-plugin (>=1.0.1, <=1.0.3) +5 more potentially affected by CVE-2016-4977 via org.springframework.security.oauth:spring-security-oauth2 (>=1.0.0.release, <=1.0.2.release)

org.springframework.security.oauth:spring-security-oauth2 MAVEN version =1.0.0.release, =1.0.1, =1.0.1, =1.0.1, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =1.0.22 Source cves: CVE-2016-4977 Source advisory: OSV:GHSA-7Q9C-H23X-65FQ...

Authorization Bypass

cloudfoundry-identity-server is vulnerable to authorization bypasses. A malicious user can use a refresh token to gain access to the application instead of using an access token, allowing them to stay authenticated longer...

org.cloudfoundry.identity:cloudfoundry-identity-api (>=4.6.0, <=4.7.4), org.cloudfoundry.identity:cloudfoundry-identity-app (>=4.6.0, <=4.7.4) +1 more potentially affected by CVE-2018-11047 via org.cloudfoundry.identity:cloudfoundry-identity-server (>=4.6.0, <=4.7.4)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version =4.6.0, =4.6.0, =4.6.0, =4.6.0, =4.7.4 Source cves: CVE-2018-11047 Source advisory: MEND:CVE-2018-11047...

org.cloudfoundry.identity:cloudfoundry-identity-api (>=4.8.0, <=4.10.0), org.cloudfoundry.identity:cloudfoundry-identity-app (>=4.8.0, <=4.10.0) +1 more potentially affected by CVE-2018-11047 via org.cloudfoundry.identity:cloudfoundry-identity-server (>=4.8.0, <=4.10.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version =4.8.0, =4.8.0, =4.8.0, =4.8.0, =4.10.0 Source cves: CVE-2018-11047 Source advisory: MEND:CVE-2018-11047...

org.cloudfoundry.identity:cloudfoundry-identity-api (>=4.8.0, <=4.10.0), org.cloudfoundry.identity:cloudfoundry-identity-app (>=4.8.0, <=4.10.0) +1 more potentially affected by CVE-2018-11041 via org.cloudfoundry.identity:cloudfoundry-identity-server (>=4.8.0, <=4.10.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version =4.8.0, =4.8.0, =4.8.0, =4.8.0, =4.10.0 Source cves: CVE-2018-11041 Source advisory: MEND:CVE-2018-11041...

org.cloudfoundry.identity:cloudfoundry-identity-api (>=3.0.0, <=4.7.4), org.cloudfoundry.identity:cloudfoundry-identity-app (>=3.0.0, <=4.7.4) +1 more potentially affected by CVE-2018-11041 via org.cloudfoundry.identity:cloudfoundry-identity-server (>=3.0.0, <=4.7.4)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =4.7.4 Source cves: CVE-2018-11041 Source advisory: MEND:CVE-2018-11041...

org.cloudfoundry.identity:cloudfoundry-identity-api (4.11.0), org.cloudfoundry.identity:cloudfoundry-identity-app (4.11.0) +1 more potentially affected by CVE-2018-11041 via org.cloudfoundry.identity:cloudfoundry-identity-server (4.11.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version 4.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cloudfoundry.identity:cloudfoundry-identity-server and may be impacted: - org.cloudfoundry.identity:cloudfoundry-identity-ap...

Man-in-the-Middle (MitM)

github.com/cloudfoundry/gorouter is vulnerable to man-in-the-middle MitM attacks. The vulnerability exists due to the lack of validation on the value of the X-Forwarded-Proto header, allowing the client to use a http connection and be prone to MitM attacks...

Privilege Escalation

CloudFoundry User Account and Authentication UAA is vulnerable to privilege escalation. A zone administrator can issue a token that impersonates another zone, allowing an escalation of privileges during offline validation of clients...

File Traversal

github.com/cloudfoundry-attic/garden-linux is vulnerable to file traversal attacks. The garden-linux nstar executable allows attackers to read files within the host system that the BOSH-created vcap user has permission to read. This can be done by staging an application on Cloud Foundry using Die...

Cross-site Scripting (XSS)

cloudfoundry-identity-uaa is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary Javascript through the clientId parameter of a request to the UAA OpenID Connect check session iframe endpoint...

Denial Of Service (DoS) Through Token Revocation

CloudFoundry User Account and Authentication UAA is vulnerable to denial of service DoS attacks. The checktoken endpoint does not validate the clientId when revoking opaque or JWT client tokens, allowing a malicious user to revoke another user's token...

Privilege Escalation

CloudFoundry User Account and Authentication UAA is vulnerable to privilege escalation. There is a flaw in mapping permissions for an external provider, allowing Zone administrators to escalate their privileges...

Forwarded HTTP Headers

cloudfoundry-identity-server is vulnerable to forwarded http headers. There is an issue with forwarded http headers in UAA that can result in an account being corrupted...

Privilege Escalation

CloudFoundry User Account and Authentication UAA is vulnerable to privilege escalation attacks. These attacks are possible because any user is able to access the invitations endpoint. Through the endpoint, malicious users are able to perform a password reset on a different user...

org.cloudfoundry.identity:cloudfoundry-identity-api (>=3.10.0, <=3.15.0), org.cloudfoundry.identity:cloudfoundry-identity-app (>=3.10.0, <=3.15.0) +1 more potentially affected by CVE-2017-4974 via org.cloudfoundry.identity:cloudfoundry-identity-server (>=3.10.0, <=3.15.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version =3.10.0, =3.10.0, =3.10.0, =3.10.0, =3.15.0 Source cves: CVE-2017-4974 Source advisory: MEND:CVE-2017-4974...

org.cloudfoundry.identity:cloudfoundry-identity-api (>=3.10.0, <=3.13.0), org.cloudfoundry.identity:cloudfoundry-identity-app (>=3.10.0, <=3.13.0) +1 more potentially affected by CVE-2017-4973 via org.cloudfoundry.identity:cloudfoundry-identity-server (>=3.10.0, <=3.13.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version =3.10.0, =3.10.0, =3.10.0, =3.10.0, =3.13.0 Source cves: CVE-2017-4973 Source advisory: MEND:CVE-2017-4973...

org.cloudfoundry.identity:cloudfoundry-identity-api (>=3.10.0, <=4.1.0), org.cloudfoundry.identity:cloudfoundry-identity-app (>=3.10.0, <=4.1.0) +1 more potentially affected by CVE-2017-4992 via org.cloudfoundry.identity:cloudfoundry-identity-server (>=3.10.0, <=4.1.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version =3.10.0, =3.10.0, =3.10.0, =3.10.0, =4.1.0 Source cves: CVE-2017-4992 Source advisory: MEND:CVE-2017-4992...

org.cloudfoundry.identity:cloudfoundry-identity-api (>=3.0.0, <=3.3.0), org.cloudfoundry.identity:cloudfoundry-identity-app (>=3.0.0, <=3.3.0) +1 more potentially affected by CVE-2016-3084 via org.cloudfoundry.identity:cloudfoundry-identity-server (>=3.0.0, <=3.3.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.3.0 Source cves: CVE-2016-3084 Source advisory: MEND:CVE-2016-3084...

Blind SQL Injection

CloudFoundry User Account and Authentication UAA is vulnerable to blind SQL injections. A malicious user cause a blind SQL injection when executing a simple query to the user database...