Cloudfoundry User Account And Authentication vulnerabilities

• cloudfoundry cloud foundry, user account and authentication +1 more This disclosure regards a vulnerability related to UAA refresh tokens and external identity... CVE-2023-20903 4.3 MediumMarch 28, 2023
• cloudfoundry cf-deployment, user account and authentication +1 more UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability. A malicious... CVE-2021-22098 6.1 MediumAugust 11, 2021
• cloudfoundry cf-deployment, user account and authentication +1 more In UAA versions prior to 75.3.0, sensitive information like relaying secret of the provider was... CVE-2021-22001 7.5 HighJuly 22, 2021
• cloud foundry uaa, cloudfoundry cf-deployment, user account and authentication +2 more UAA fails to check the state parameter when authenticating with external IDPs CVE-2020-5402 8.8 HighFebruary 27, 2020
• cloud foundry uaa release, cloudfoundry cf-deployment, user account and authentication +2 more UAA logs all query parameters with debug logging level CVE-2019-11293 8.8 HighDecember 6, 2019
• cloud foundry uaa release, cloudfoundry cf-deployment, user account and authentication +2 more Cloud Foundry UAA logs query parameters in tomcat access file CVE-2019-11290 8.8 HighNovember 25, 2019
• cloud foundry uaa release (oss), cloudfoundry user account and authentication +1 more Privilege Escalation via Blind SCIM Injection in UAA CVE-2019-11278 8.7 HighSeptember 26, 2019
• cloud foundry uaa release (oss), cloudfoundry user account and authentication +1 more UAA SCIM Filter XSS CVE-2019-11274 4.3 MediumAugust 9, 2019
• cloudfoundry uaa-release, pivotal elastic runtime, cloudfoundry cf-release +1 more +3 more The identity zones feature in Pivotal Cloud Foundry 208 through 229; UAA 2.0.0 through 2.7.3 and... CVE-2016-0732 8.8 HighSeptember 7, 2017