Lucene search
Veracode Vulnerability DatabaseVERACODE:20268HistoryMay 17, 2019 - 3:40 a.m.
Information Disclosure
2019-05-1703:40:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.002 Low
EPSS
Percentile
57.8%
cloudfoundry-identity-server is vulnerable to information disclosure. The vulnerability exists as it defaults to sending emails to @unknown.org if a user’s email address is not provided, allowing the owner of the unknown.org domain to receive password recovery emails of other users.
| CPE | Name | Operator | Version |
|---|---|---|---|
| uaa server | le | 4.30.0 |
Related
prion
prion
Design/Logic Flaw
2019-06-19 23:15:00
cve
cve
CVE-2019-3787
2019-06-19 23:15:10
cloudfoundry
cloudfoundry
osv
osv
CVE-2019-3787
2019-06-19 23:15:10
nvd
nvd
CVE-2019-3787
2019-06-19 23:15:10
cvelist
cvelist
CVE-2019-3787 UAA defaults email address to an insecure domain
2019-05-14 00:00:00