Privilege Escalation

CloudFoundry User Account and Authentication UAA is vulnerable to privilege escalation. A zone administrator can issue a token that impersonates another zone, allowing an escalation of privileges during offline validation of clients...