CVE-2018-15754

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Cloud Foundry UAA, versions 60 prior to 66.0, contain an authorization logic error. In environments with multiple identity providers that contain accounts across identity providers with the same username, a remote authenticated user with access to one of these accounts may be able to obtain a token for an account of the same username in the other identity provider.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-863

Affected software

Vendor	Product	Versions
Cloud Foundry	UAA Release	>= 60, < 66.0

References

http://www.securityfocus.com/bid/106240Third Party Advisory, VDB Entry
https://www.cloudfoundry.org/blog/cve-2018-15754Mitigation, Vendor Advisory
https://www.cloudfoundry.org/blog/cve-2018-15754/Mitigation, Vendor Advisory
http://www.securityfocus.com/bid/106240Third Party Advisory, VDB Entry
https://www.cloudfoundry.org/blog/cve-2018-15754Mitigation, Vendor Advisory
https://www.cloudfoundry.org/blog/cve-2018-15754/Mitigation, Vendor Advisory

Timeline

Published: Dec 13, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-157558.8Cloud Foundry CF Networking Release, versions 2.11.0 prior to 2.16.0, contain an internal api endpoint vulnerable to SQL injection between D CVE-2018-157567.5Spring Framework, version 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x b CVE-2018-157588.1Spring Security OAuth, versions 2.3 prior to 2.3.4, and 2.2 prior to 2.2.3, and 2.1 prior to 2.1.3, and 2.0 prior to 2.0.16, and older unsup CVE-2018-157599.8Pivotal Cloud Foundry On Demand Services SDK, versions prior to 0.24 contain an insecure method of verifying credentials. A remote unauthent CVE-2018-157618.8Cloud Foundry UAA release, versions prior to v64.0, and UAA, versions prior to 4.23.0, contains a validation error which allows for privileg CVE-2018-157628.8Pivotal Operations Manager, versions 2.0.x prior to 2.0.24, versions 2.1.x prior to 2.1.15, versions 2.2.x prior to 2.2.7, and versions 2.3.CVE-2018-157638.8Pivotal Container Service, versions prior to 1.2.0, contains an information disclosure vulnerability which exposes IaaS credentials to appli CVE-2018-157649.8Dell EMC ESRS Policy Manager versions 6.8 and prior contain a remote code execution vulnerability due to improper configurations of triggere CVE-2018-157655.5Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains an Information Exposure vulnerability. The log file contents store s CVE-2018-157667.5On install, Dell Encryption versions prior 10.0.1 and Dell Endpoint Security Suite Enterprise versions prior 2.0.1 will overwrite and manual CVE-2018-157678.8The Dell OpenManage Network Manager virtual appliance versions prior to 6.5.3 contain an improper authorization vulnerability caused by a mi CVE-2018-157686.5Dell OpenManage Network Manager versions prior to 6.5.0 enabled read/write access to the file system for MySQL users due to insecure default