Privilege Escalation

2017-06-1907:59:53

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

42.9%

JSON

CloudFoundry User Account and Authentication (UAA) is vulnerable to privilege escalation. There is a flaw in mapping permissions for an external provider, allowing Zone administrators to escalate their privileges.

CPENameOperatorVersion
org.cloudfoundry.identity:cloudfoundry-identity-scimle2.7.4.9
uaa servereq3.6.0
uaa serverle3.9.1
uaa serverle3.19.0
uaa serverle4.3.0
uaa serverle3.5.0
uaa serverle3.8.0
org.cloudfoundry.identity:cloudfoundry-identity-scimle2.7.4.9
uaa servereq3.6.0
uaa serverle3.9.1

Name	Operator	Version
org.cloudfoundry.identity:cloudfoundry-identity-scim	le	2.7.4.9
uaa server	eq	3.6.0
uaa server	le	3.9.1
uaa server	le	3.19.0
uaa server	le	4.3.0
uaa server	le	3.5.0
uaa server	le	3.8.0
org.cloudfoundry.identity:cloudfoundry-identity-scim	le	2.7.4.9
uaa server	eq	3.6.0
uaa server	le	3.9.1

Rows per page:

1-10 of 141

References

www.cloudfoundry.org/cve-2017-8032/

0.001 Low

EPSS

Percentile

42.9%

JSON

Related for VERACODE:4435