Unrated severityNVD Advisory· Published Aug 5, 2019· Updated Sep 17, 2024
UAA clients.write vulnerability
CVE-2019-11270
Description
Cloud Foundry UAA versions prior to v73.4.0 contain a vulnerability where a malicious client possessing the 'clients.write' authority or scope can bypass the restrictions imposed on clients created via 'clients.write' and create clients with arbitrary scopes that the creator does not possess.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <73.4.0
- Cloud Foundry/UAA Release (OSS)v5Range: prior to v73.4.0
Patches
Vulnerability mechanics
References
2- pivotal.io/security/cve-2019-11270mitrex_refsource_CONFIRM
- www.cloudfoundry.org/blog/cve-2019-11270mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.