CVE-2015-3190
First published: Thu May 25 2017(Updated: )
With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier the UAA logout link is susceptible to an open redirect which allows an attacker to insert malicious web page as a redirect parameter.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cloudfoundry Cf-release | <=209 | |
| Pivotal Software Cloud Foundry Elastic Runtime | <=1.4.5 | |
| Pivotal Software Cloud Foundry Uaa | <=2.2.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/references
- agent/author
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/cloudfoundry
- canonical/cloudfoundry cf-release
- version/cloudfoundry cf-release/209
- vendor/pivotal software
- canonical/pivotal software cloud foundry elastic runtime
- version/pivotal software cloud foundry elastic runtime/1.4.5
- canonical/pivotal software cloud foundry uaa
- version/pivotal software cloud foundry uaa/2.2.6