CVE-2018-15761 — UAA Privilege Escalation
Cloud Foundry UAA release, versions prior to v64.0, and UAA, versions prior to 4.23.0, contains a validation error which allows for privilege escalation. A remote authenticated …
Published: 2018-11-19 · CVSS: 9.9 · CVSS 3.0
Cloud Foundry UAA release, versions prior to v64.0, and UAA, versions prior to 4.23.0, contains a validation error which allows for privilege escalation. A remote authenticated user may modify the url and content of a consent page to gain a token with arbitrary scopes that escalates their privileges.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7