We found results for “”
CVE-2024-38806
Good to know:
Date: July 18, 2024
Failure to properly synchronize user's permissions in UAA in Cloud Foundry Foundation v40.17.0 https://github.com/cloudfoundry/cf-deployment/releases/tag/v40.17.0 , potentially resulting in users retaining access rights they should not have. This can allow them to perform operations beyond their intended permissions.
Language: Java
Severity Score
Severity Score
Weakness Type (CWE)
Expected Behavior Violation
CWE-440Top Fix
Upgrade Version
Upgrade to version org.cloudfoundry.identity:cloudfoundry-identity-common:no_fix;org.cloudfoundry.identity:cloudfoundry-identity-server:no_fix
CVSS v3.1
| Base Score: |
|
|---|---|
| Attack Vector (AV): | LOCAL |
| Attack Complexity (AC): | HIGH |
| Privileges Required (PR): | HIGH |
| User Interaction (UI): | NONE |
| Scope (S): | UNCHANGED |
| Confidentiality (C): | LOW |
| Integrity (I): | LOW |
| Availability (A): | LOW |
Vulnerabilities
Projects
Contact Us


