Privilege Escalation

CloudFoundry User Account and Authentication (UAA) is vulnerable to privilege escalation. A zone administrator can issue a token that impersonates another zone, allowing an escalation of privileges during offline validation of clients.