Medium severity6.1NVD Advisory· Published May 25, 2017· Updated Jun 17, 2026
CVE-2015-3190
CVE-2015-3190
Description
With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier the UAA logout link is susceptible to an open redirect which allows an attacker to insert malicious web page as a redirect parameter.
Affected products
7cpe:2.3:a:cloudfoundry:cf-release:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cloudfoundry:cf-release:*:*:*:*:*:*:*:*range: <=209
- (no CPE)range: <=v209
- cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*Range: <=1.4.5
- Range: <=2.2.6
- Range: Runtime cf-release versions v209 or earlier
Patches
Vulnerability mechanics
References
1- pivotal.io/security/cve-2015-3190nvdVendor Advisory
News mentions
0No linked articles in our index yet.