CVE-2018-11083

Bosh accepts refresh tokens in place of an access token

State: Published
Severity: 8.4 High
Published: Oct 5, 2018
Updated: Aug 5, 2024
Reserved: May 14, 2018

Description

Cloud Foundry BOSH, versions v264 prior to v264.14.0 and v265 prior to v265.7.0 and v266 prior to v266.8.0 and v267 prior to v267.2.0, allows refresh tokens to be as access tokens when using UAA for authentication. A remote attacker with an admin refresh token given by UAA can be used to access BOSH resources without obtaining an access token, even if their user no longer has access to those resources.

Scores

CVSS	Score	Vector	Source
3.0	8.4 High	CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H	dell

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
BOSHCloud Foundry	264 to before v264.14.0Affected 265 to before v265.7.0Affected 266 to before v266.8.0Affected 267 to before v267.2.0Affected

References

https://www.cloudfoundry.org/blog/cve-2018-11083

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.