CWE Code: 89
Vulnerability Type: sql_injection
CVSS Score: 5.0
CWE Name:  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Summary: an issue was discovered in cloud foundry foundation cf-release versions prior to v257; uaa release 2.x versions prior to v2.7.4.14, 3.6.x versions prior to v3.6.8, 3.9.x versions prior to v3.9.10, and other versions prior to v3.15.0; and uaa bosh release (uaa-release) 13.x versions prior to v13.12, 24.x versions prior to v24.7, and other versions prior to v30. an attacker can use a blind sql injection attack to query the contents of the uaa database.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2017-06-13
Last Modified Date: 2017-06-26