UAA vulnerabilities
1 known vulnerability in UAA from Cloud Foundry Foundation. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.2average CVSS score
Latest first
- 9.2 Critical severity
UAA: Improper Access Control
A vulnerability allows users authenticating through a federated OIDC provider to obtain the uaa.admin scope despite operators restricting that provider through externalGroupsWhitelist configuration. The issue occurs specifically when an OIDC identity provider