Medium severity4.2NVD Advisory· Published Dec 13, 2018· Updated Jun 17, 2026
CVE-2018-15754
CVE-2018-15754
Description
Cloud Foundry UAA, versions 60 prior to 66.0, contain an authorization logic error. In environments with multiple identity providers that contain accounts across identity providers with the same username, a remote authenticated user with access to one of these accounts may be able to obtain a token for an account of the same username in the other identity provider.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:pivotal_software:cloud_foundry_uaa-release:*:*:*:*:*:*:*:*Range: >=60.0,<66.0
- Range: <66.0
- Cloud Foundry/UAA Releasev5Range: 60
Patches
Vulnerability mechanics
References
3- www.securityfocus.com/bid/106240nvdThird Party AdvisoryVDB Entry
- www.cloudfoundry.org/blog/cve-2018-15754nvdMitigationVendor Advisory
- www.cloudfoundry.org/blog/cve-2018-15754/nvdMitigationVendor Advisory
News mentions
0No linked articles in our index yet.