Loading
Generated remediation guidance and an executive summary. No account required.
Cloud Foundry UAA release, versions prior to v64.0, and UAA, versions prior to 4.23.0, contains a validation error which allows for privilege escalation. A remote authenticated user may modify the url and content of a consent page to gain a token with arbitrary scopes that escalates their privileges.
Use Pivotal Software vendor hub and Cloud Foundry Uaa product page to widen CVE-2018-15761 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2015-5172, CVE-2015-5171 and CVE-2018-1192 for nearby disclosures in the same product family.