Pivotal Cloud Foundry UAA XSS on UAA OpenID Connect check session iframe endpoint
An issue was discovered in these Pivotal Cloud Foundry products: all versions prior to cf-release v270, UAA v3.x prior to v3.20.2, and UAA bosh v30.x versions prior to v30.8 and all other versions prior to v45.0. A cross-site scripting (XSS) attack is possible in the clientId parameter of a request to the UAA OpenID Connect check session iframe endpoint used for single logout session management.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-1190US | medium6.1 | — | ||
An issue was discovered in these Pivotal Cloud Foundry products: all versions prior to cf-release v270, UAA v3.x prior to v3.20.2, and UAA bosh v30.x versions prior to v30.8 and al… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/cloudfoundry/uaaPACKAGE
- https://github.com/cloudfoundry/uaa/commit/96fe26711f8f8855d2994a531447f730afd61844WEB
- https://nvd.nist.gov/vuln/detail/CVE-2018-1190ADVISORY
- https://web.archive.org/web/20200227133214/http://www.securityfocus.com/bid/102427WEB
- https://www.cloudfoundry.org/cve-2018-1190WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan