Medium severity6.0NVD Advisory· Published Apr 17, 2019· Updated Jun 17, 2026
CVE-2019-3798
CVE-2019-3798
Description
Cloud Foundry Cloud Controller API Release, versions prior to 1.79.0, contains improper authentication when validating user permissions. A remote authenticated malicious user with the ability to create UAA clients and knowledge of the email of a victim in the foundation may escalate their privileges to that of the victim by creating a client with a name equal to the guid of their victim.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: <1.79.0
- Cloud Foundry/CAPI-releasev5Range: All
Patches
Vulnerability mechanics
References
2- www.securityfocus.com/bid/108095nvdThird Party AdvisoryVDB Entry
- www.cloudfoundry.org/blog/cve-2019-3798nvdVendor Advisory
News mentions
0No linked articles in our index yet.