CVE-2018-1262

State: Published
Severity: Not scored
Published: May 15, 2018
Updated: Sep 16, 2024
Reserved: Dec 6, 2017

Description

Cloud Foundry Foundation UAA, versions 4.12.X and 4.13.X, introduced a feature which could allow privilege escalation across identity zones for clients performing offline validation. A zone administrator could configure their zone to issue tokens which impersonate another zone, granting up to admin privileges in the impersonated zone for clients performing offline token validation.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
CloudFoundry UAACloud Foundry	4.12.X and 4.13.XAffected

References

https://www.cloudfoundry.org/blog/cve-2018-1262/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.