Exploit/Advisories

Published on July 12th, 2019 📆 | 1559 Views ⚑

0

Cloud Foundry UAA up to 73.2.x information disclosure [CVE-2019-11268]

https://www.ispeech.org

A vulnerability classified as problematic was found in Cloud Foundry UAA up to 73.2.x. This vulnerability affects an unknown code. The manipulation with an unknown input leads to a information disclosure vulnerability. The CWE definition for the vulnerability is CWE-200. As an impact it is known to affect confidentiality.

The weakness was shared 07/11/2019. The advisory is shared for download at cloudfoundry.org. This vulnerability was named CVE-2019-11268 since 04/18/2019. There are neither technical details nor an exploit publicly available.

Upgrading to version 73.3.0 eliminates this vulnerability.

Product

Name

• Cloud Foundry UAA

CPE 2.3

• 🔒

CPE 2.2

• 🔒

CVSSv3

VulDB Meta Base Score: 3.5
VulDB Meta Temp Score: 3.4

VulDB Base Score: ≈3.5
VulDB Temp Score: ≈3.4
VulDB Vector: 🔒
VulDB Reliability: 🔍

CVSSv2

VulDB Base Score: 🔒
VulDB Temp Score: 🔒
VulDB Reliability: 🔍

Exploiting

Class: Information disclosure (CWE-200)
Local: Yes
Remote: No

Availability: 🔒
Status: Not defined

Price Prediction: 🔍
Current Price Estimation: 🔒

Threat Intelligence

Threat: 🔍
Adversaries: 🔍
Geopolitics: 🔍
Economy: 🔍
Predictions: 🔍
Remediation: 🔍

Countermeasures

Recommended: Upgrade
Status: 🔍

0-Day Time: 🔒

Upgrade: Cloud Foundry UAA 73.3.0

Timeline

04/18/2019 CVE assigned
07/11/2019 Advisory disclosed
07/12/2019 VulDB entry created
07/12/2019 VulDB last update

Sources

Advisory: cloudfoundry.org

CVE: CVE-2019-11268 (🔒)

Entry

Created: 07/12/2019 09:25 AM
Complete: 🔍

https://vuldb.com/?id.137764

Tagged with: 11268 • cloud • disclosure • foundry • information