VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Jul 11, 2019· Updated Jun 17, 2026

CVE-2019-11268

CVE-2019-11268

Description

Cloud Foundry UAA version prior to 73.3.0, contain endpoints that contains improper escaping. An authenticated malicious user with basic read privileges for one identity zone can extend those reading privileges to all other identity zones and obtain private information on users, clients, and groups in all other identity zones.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Cloudfoundry/Uaa Release
    cpe:2.3:a:pivotal_software:cloud_foundry_uaa-release:*:*:*:*:*:*:*:*
    Range: <73.3.0
  • Cloudfoundry/Uaallm-fuzzy
    Range: <73.3.0
  • Cloud Foundry/UAA Release (OSS)v5
    Range: prior to v73.3.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.