CVE-2018-15761: UAA Privilege Escalation
First published: Mon Nov 19 2018(Updated: )
Cloud Foundry UAA release, versions prior to v64.0, and UAA, versions prior to 4.23.0, contains a validation error which allows for privilege escalation. A remote authenticated user may modify the url and content of a consent page to gain a token with arbitrary scopes that escalates their privileges.
Credit: security_alert@emc.com security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Pivotal Software Cloud Foundry Uaa | <4.23.0 | |
| Pivotal Software Cloudfoundry Uaa Release | <64.0 | |
| maven/org.cloudfoundry.identity:cloudfoundry-identity-server | <4.23.0 | 4.23.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.cloudfoundry.org/blog/cve-2018-15761/
- https://nvd.nist.gov/vuln/detail/CVE-2018-15761
- https://github.com/cloudfoundry/uaa/commit/3f0730a015d10166de23b7e036743c185f0576a6
- https://github.com/cloudfoundry/uaa/commit/95b7d9e7fae534a362b98de1df5bf501cd52c481
- https://www.cloudfoundry.org/blog/cve-2018-15761
- https://github.com/advisories/GHSA-292x-hjr8-226f (Advisory)
Frequently Asked Questions
What is CVE-2018-15761?
CVE-2018-15761 is a vulnerability in Cloud Foundry UAA and UAA release versions that allows for privilege escalation.
What is the severity of CVE-2018-15761?
CVE-2018-15761 has a severity rating of 8.8 (critical).
Which software versions are affected by CVE-2018-15761?
Cloud Foundry UAA versions prior to 4.23.0 and UAA release versions prior to v64.0 are affected by CVE-2018-15761.
How can the privilege escalation be exploited in CVE-2018-15761?
A remote authenticated user can modify the consent page URL and content to gain a token with arbitrary scopes, thereby escalating their privileges.
Where can I find more information about CVE-2018-15761?
You can find more information about CVE-2018-15761 at the following link: https://www.cloudfoundry.org/blog/cve-2018-15761/
- collector/nvd-index
- agent/type
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-292x-hjr8-226f
- alias/CVE-2018-15761
- agent/software-canonical-lookup
- agent/references
- agent/softwarecombine
- agent/description
- collector/nvd-cve
- source/NVD
- agent/author
- collector/github-advisory
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/title
- agent/tags
- agent/first-publish-date
- agent/event
- vendor/pivotal software
- canonical/pivotal software cloud foundry uaa
- canonical/pivotal software cloudfoundry uaa release
- package-manager/maven